Firebase Authentication plugin allows users to login into your WordPress site using their Firebase login credentials.

1. Features Included in the Firebase Premium Plugin

1.1: Allow login with Firebase and WordPress

In the Firebase Authentication Plugin, there are two different options to enable login into your WordPress site.

• Both Firebase and WordPress

When this option is enabled, the users that are present in your Firebase project and the normal WordPress users both are allowed to login into your WordPress site via the default wp-login form.


• Only Firebase

When this option is enabled, only the users that are present in your Firebase project are allowed to login into your WordPress site via the default wp-login form. The normal WordPress users are restricted to login into the site. There is an option to allow only Administrators to use the WordPress login.



1.2: Attribute mapping

When a user tries to login into the WordPress site using the Firebase credentials, after successful authentication, if the user is not present in the WordPress, a new user is created and while creating the user, you can map any unique attribute received from the Firebase to your WordPress username attribute. If you are using the firebase email password authentication method, then you can also map the firebase email attribute to the WordPress email profile attribute.
Eg. you can map the Firebase user-id received from Firebase to the WordPress username.



1.3: Auto register users in Firebase as well as WordPress

When a user tries to login into the WordPress site using Firebase credentials and if the user is not present in the WordPress site, a new user is auto-created in the Wordpress site with the email address received from the Firebase with the Subscriber role. The user is created with a Random password in WordPress, for security we do not sync the firebase passwords in wordpress. The passwords are maintained in Firebase only such that Firebase will be a single authentication source.
Other way around, if the user is not present in the Firebase and if the user tries to register via the default WooCommerce registration form or the default BuddyPress registration form, then the user is created in the Firebase Authentication tab with the email address and the password that he has entered on the WordPress site.



1.4: Login & Registration Form Integration (WooCommerce, BuddyPress)

Using the default Login form of WooCommerce and Buddypress, users can login into the WordPress site by entering their firebase credentials. At the time of registration, users will be auto-created in Firebase with the email and password entered on the default registration form of WooCommerce and Buddypress.



1.5: Custom redirect URL after Login and Logout

This feature allows you to configure the URL wherever you want to redirect users after login or after logout.



1.6: Firebase Email Verification

Email verification is a method of confirming that a subscriber has provided a valid email address and we have genuine registrations. It will also help in identifying if an email address is valid, inactive, or false. Your WordPress site is protected from spam registrations using the email verification feature of the Firebase authentication plugin.

• Send verification email after registration

  When you select the Send verification email after registration checkbox from the Advanced settings => Sync WordPress and Firebase users tab, then every user who will register on your site, that user will receive an email with a Verification link.

  
• Do Not allow login if email is not verified

When you select the Do Not allow login if email is not verified checkbox from the Login settings => Advanced Sign in options tab, then only users with verified email addresses will be allowed to log in.



1.7: WP hooks to integrate your Custom/Third-party Login and Registration forms

If you are using any custom or third-party plugins for login and registration form on your wordpress site, then we provide certain hooks to integrate the firebase authentication with these login and registration forms. We will provide you a code that you need to add in your functions.php file. So that users can enter their firebase credentials on that login form to login into the site. Users will be auto-created in the Firebase with the email and password when they register into the wordpress site via your custom registration form.

Note: Users will be auto created in the Firebase Authentication tab with email and password and not in the Firestore

2. Features Included in the Firebase Enterprise Plugin

In the Firebase Authentication Enterprise plugin, all the features of the Premium Firebase Authentication plugin are included. Apart from that, all the below features are included.

2.1: WP hooks to read Firebase token, login event and extend plugin functionality

We provide multiple hooks in the plugin to extend the plugin functionality. Some are listed below.Hook to read Firebase token: This hook is called every time when a user login into the WordPress site using FIrebase credentials.Login and Registration event hooks: You can retrieve the logged in or newly created wordpress user object by calling these hooks. We can also add hooks according to your requirements. Contact us at oauthsupport@xecurify.com for more details.

2.2: Shortcode to add Firebase Login Form and Registration form

We provide shortcodes to add login and registration forms on your wordpress site. Firebase users can login into the WordPress site using this form by entering their Firebase email address and password. Using the registration form, users will be auto-created in Firebase with the email address and password.You can add custom css to these forms according to your theme and as per your requirements.

You can find the shortcode to add login and registration form in the below screenshot.



2.3: Firebase Social login Authentication methods

Different Firebase social login authentication methods like Google, Facebook, Github, Twitter, Yahoo, Microsoft, Apple are supported in the Firebase Authentication Enterprise plugin.There is an option to add the login button such as ‘Login with <social-provider>’ on the default WordPress login form.



2.4: Shortcode to add Firebase Social Login buttons

Shortcode is provided so that you can add the Firebase social login buttons anywhere on your WordPress site so that users can log in into the WordPress site via these social login providers.



2.5: Phone Authentication(Passwordless login using Firebase OTP verification)

We provide a shortcode for the ‘Login with Phone’ button so that users can login into the WordPress site using their phone no. Users will enter the phone no first, they will receive the OTP on their phone, after entering that otp, users can login into the site without entering any password that is passwordless authentication. In this case, users will be created in the WordPress site with username as the phone no and with the subscriber role.




 Steps to setup login using phone authentication

• Go to your firebase project and click on the Authentication tab on the left side of the screen and then Sign-in method as shown below and click on Add new provider.


• Select Phone option from the list of available sign-in options.


• Click on Enable option and click on save.


• To insert the Firebase Phone Authentication button, create a new page or go to an existing page, and paste the shortcode [mo_firebase_auth_login_ui] on WordPress sites.




Note:

If you want to customize this user flow according to your custom or third party forms, it is possible by doing some customizations in the plugin. The additional cost will be required to customize the login flow according to your forms and requirements.




miniOrange does not store or transfer any data which is coming from Firebase to WordPress. All the data remains within your premises/server. We do not provide the developer license for our paid plugins and the source code is protected. It is strictly prohibited to make any changes in the code without having written permission from miniOrange. There are hooks provided in the plugin which can be used by the developers to extend the plugin's functionality.