Java后端中的Firebase VerifyIdToken

Question

我有一个移动应用程序，它使用Google签名并试图在后端(java )验证令牌。我已经为此设置了一些代码，下面是许多文章。

1. FirebaseServiceCredential.java

这是用于防火墙连接的，因为我正在使用管理SDK验证

    package com.nostratech.nostrafood.config;

    import com.google.auth.oauth2.GoogleCredentials;
    import com.google.firebase.FirebaseApp;
    import com.google.firebase.FirebaseOptions;
    import com.google.firebase.database.FirebaseDatabase;
    import lombok.extern.slf4j.Slf4j;
    import org.springframework.context.annotation.Configuration;

    import java.io.FileInputStream;
    import java.io.IOException;

    @Slf4j
    @Configuration
    public class FirebaseServiceCredential {
    public void firebaseConnect() throws IOException {
        try {
            FileInputStream serviceAccount = new FileInputStream("resources/charity-firebase-adminsdk-ymwjh-61467z75ba.json");

        FirebaseOptions options = new FirebaseOptions.Builder()
                .setCredentials(GoogleCredentials.fromStream(serviceAccount))
                .setDatabaseUrl("https://charity.firebaseio.com/")
                .build();

        FirebaseApp.initializeApp(options);
        FirebaseDatabase.getInstance(FirebaseApp.getInstance()).setPersistenceEnabled(true);

            } catch (Exception e) {
                log.debug("Trying to login to firebase failed. Reason: " + e.getMessage());
            }
        }
    }

1. GoogleSignInService.java

这是verifyIdToken的代码

    package com.nostratech.nostrafood.service.base;

    import com.google.firebase.auth.FirebaseAuth;
    import com.google.firebase.auth.FirebaseAuthException;
    import com.google.firebase.auth.FirebaseToken;
    import org.springframework.stereotype.Service;

    @Service
    public class GoogleSignInService {

        public void verifyToken(String idToken) throws FirebaseAuthException {
            FirebaseToken decodedToken = 
            FirebaseAuth.getInstance().verifyIdToken(idToken);
            String uid = decodedToken.getUid();
        }
    }

接下来我应该做什么来验证令牌呢？我读过很多文章，但仍然坚持不知道该怎么做。

Answer 1

如果verifyIdToken()返回时不引发异常，则将验证令牌。不需要其他操作来验证ID令牌。返回值(FirebaseToken)允许您访问与经过身份验证的用户关联的UID和JWT声明。