
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@mastra/auth-firebase
Advanced tools
Affected versions:
A Firebase authentication integration package for Mastra applications. This package provides seamless integration with Firebase Authentication and Firestore for user authentication and authorization.
npm install @mastra/auth-firebase
# or
yarn add @mastra/auth-firebase
# or
pnpm add @mastra/auth-firebase
import { Mastra } from '@mastra/core/mastra';
import { MastraAuthFirebase } from '@mastra/auth-firebase';
// Initialize with default configuration
const firebaseAuth = new MastraAuthFirebase();
// Or with custom options
const firebaseAuth = new MastraAuthFirebase({
serviceAccount: 'path/to/service-account.json',
databaseId: 'your-database-id',
});
// Enable auth in Mastra
const mastra = new Mastra({
...
server: {
auth: firebaseAuth,
},
});
The package can be configured through constructor options or environment variables:
serviceAccount: Path to Firebase service account JSON filedatabaseId: Firestore database IDFIREBASE_SERVICE_ACCOUNT: Path to Firebase service account JSON fileFIRESTORE_DATABASE_ID or FIREBASE_DATABASE_ID: Firestore database IDThe package uses Firestore to manage user access. It expects a collection named user_access with documents keyed by user UIDs. The presence of a document in this collection determines whether a user is authorized.
FAQs
Mastra Firebase Auth integration
We found that @mastra/auth-firebase demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.