
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
with-firebase-authentication
Advanced tools
This example includes Firebase authentication and serverless [API routes](https://nextjs.org/docs/api-routes/introduction).
This example includes Firebase authentication and serverless API routes.
create-next-app
Execute create-next-app
with Yarn or npx to bootstrap the example:
npx create-next-app --example with-firebase-authentication with-firebase-authentication-app
# or
yarn create next-app --example with-firebase-authentication with-firebase-authentication-app
Download the example:
curl https://codeload.github.com/vercel/next.js/tar.gz/canary | tar -xz --strip=2 next.js-canary/examples/with-firebase-authentication
cd with-firebase-authentication
Set up Firebase:
.env.local.example
into a new file called .env.local
project_id
, client_email
and client_id
. Set them as environment variables in the .env.local
file at the root of this project.apiKey
, authDomain
and databaseUrl
. Set the appropriate environment variables in the .env.local
file at the root of this project.Install it and run:
npm install
npm run dev
# or
yarn
yarn dev
Deploy it to the cloud with Vercel (Documentation).
After deploying, copy the deployment URL and navigate to your Firebase project's Authentication tab. Scroll down in the page to "Authorized domains" and add that URL to the list.
FAQs
This example includes Firebase authentication and serverless [API routes](https://nextjs.org/docs/api-routes/introduction).
The npm package with-firebase-authentication receives a total of 0 weekly downloads. As such, with-firebase-authentication popularity was classified as not popular.
We found that with-firebase-authentication demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.