Refresh firebase token when user is logged in

[wmiq84]

Changes

• Added AuthProvider component which uses onIdTokenChanged to update the auth cookie on token refreshing (done automatically by Firebase before timing out)
• Added error handling, contexts folder, and security attributes

Testing

• For testing that the auth cookie gets updated on tokens refreshing, replace the AuthProvieder component with this version, where getIdToken(true) fetches a new token every 5 seconds
• Then, check the console logs for "token refreshed"
• I manually tested that Firebase refreshes the token before timing out by waiting an hour
• The cookie security attributes can be checked in the Network tab of Inspect page

"use client";
import { useEffect } from "react";
import { auth } from "@/firebase/firebase";

export default function AuthProvider({ children }: { children: React.ReactNode }) {
  useEffect(() => {
    const unsubscribe = auth.onIdTokenChanged(async (user) => {
      try {
        if (user) {
          const token = await user.getIdToken();
          document.cookie = `firebaseAuthToken=${token}; path=/; Secure; SameSite=Strict`;
          console.log("token refreshed");
        } else {
          document.cookie = `firebaseAuthToken=; path=/; Secure; SameSite=Strict; expires=Thu, 01 Jan 1970 00:00:00 GMT`;
          console.log("token cleared");
        }
      } catch {
        document.cookie = `firebaseAuthToken=; path=/; Secure; SameSite=Strict; expires=Thu, 01 Jan 1970 00:00:00 GMT`;
      }
    });

    const interval = setInterval(async () => {
      if (auth.currentUser) await auth.currentUser.getIdToken(true);
    }, 5_000);

    return () => {
      unsubscribe();
      clearInterval(interval);
    };
  }, []);

  return <>{children}</>;
}

[navyaa31]

Thanks for addressing this so fast! I just left a few comments

[navyaa31]

Can we add error handling around this

[navyaa31]

can we move this file into a folder called contexts?

[navyaa31]

Can we set security attributes on this?

https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Set-Cookie

[navyaa31]

Looks good to me, thanks for addressing comments

[siwenshao]

Looks good to me!