
Company News
Socket Partners with Replit to Block Malicious Packages in AI-Powered Development
Replit is integrating Socket Firewall into its AI-powered development experience to help protect builders from malicious open source packages.
firebase-login-email
Advanced tools
This package is a wrapper to Firebase simple login including all dependencies with the exception of firebase it self. Authenticate your Firebase using your Firebase simple login credentials.
Firebase makes it easy to integrate email and password authentication into your app. Firebase automatically stores your users' credentials securely (using bcrypt) and redundantly (daily off-site backups).
This separates sensitive user credentials from your application data, and lets you focus on the user interface and experience for your app. Allows your node applications to authenticate a Firebase reference using Firebase Simple Login with email and password.
:heavy_exclamation_mark: Do not embet your credentials on public code!
Install via npm:
npm install firebase firebase-login-email
const { initializeApp } = require('firebase/app');
require('firebase/auth');
const FirebaseLoginEmail = require('firebase-login-email');
const app = initializeApp({
apiKey: process.env.FIREBASE_API_KEY,
authDomain: process.env.FIREBASE_AUTH_DOMAIN,
});
new FirebaseLoginEmail(
app,
{
email: process.env.FIREBASE_EMAIL,
password: process.env.FIREBASE_PASSWORD,
},
(error, user) => {
if (error) {
console.error('Login failed:', error.message);
return;
}
console.log('Logged in as:', user.uid);
}
);
Promise-based (async/await):
const { initializeApp } = require('firebase/app');
const { FirebaseLoginEmail } = require('firebase-login-email');
const app = initializeApp({
apiKey: process.env.FIREBASE_API_KEY,
authDomain: process.env.FIREBASE_AUTH_DOMAIN,
});
const user = await FirebaseLoginEmail.login(app, {
email: process.env.FIREBASE_EMAIL,
password: process.env.FIREBASE_PASSWORD,
});
console.log('Logged in as:', user.uid);
Load credentials from a .env file (e.g. with dotenv) or set FIREBASE_API_KEY, FIREBASE_AUTH_DOMAIN, FIREBASE_EMAIL, and FIREBASE_PASSWORD in your environment before running.
const user = await FirebaseLoginEmail.signUp(app, {
email: process.env.FIREBASE_EMAIL,
password: process.env.FIREBASE_PASSWORD,
});
console.log('Created user:', user.uid);
await FirebaseLoginEmail.sendPasswordReset(app, 'user@example.com');
// User receives an email with a reset link
const unsubscribe = FirebaseLoginEmail.onAuthStateChanged(app, (user) => {
if (user) console.log('Signed in:', user.uid);
else console.log('Signed out');
});
// Later: unsubscribe() to stop listening
const { user, idToken } = await FirebaseLoginEmail.loginWithIdToken(app, {
email: process.env.FIREBASE_EMAIL,
password: process.env.FIREBASE_PASSWORD,
});
// Send idToken in Authorization header: Bearer <idToken>
// Or get token from an already signed-in user:
const token = await FirebaseLoginEmail.getIdToken(user);
Please report issues to the ticket system.
See CONTRIBUTING.md for how to contribute, run tests, and install the project locally.
FAQs
This package is a wrapper to Firebase simple login including all dependencies with the exception of firebase it self. Authenticate your Firebase using your Firebase simple login credentials.
The npm package firebase-login-email receives a total of 9 weekly downloads. As such, firebase-login-email popularity was classified as not popular.
We found that firebase-login-email demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Replit is integrating Socket Firewall into its AI-powered development experience to help protect builders from malicious open source packages.

Security News
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.

Research
/Security News
Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.