Skip to content

feat(pnv): Add support for Firebase Phone Number Verification#1203

Open
lahirumaramba wants to merge 19 commits intomainfrom
lm-fpnv
Open

feat(pnv): Add support for Firebase Phone Number Verification#1203
lahirumaramba wants to merge 19 commits intomainfrom
lm-fpnv

Conversation

@lahirumaramba
Copy link
Copy Markdown
Member

Add support for Firebase Phone Number Verification

@lahirumaramba lahirumaramba added release-note release:stage Stage a release candidate labels May 5, 2026
Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces the Firebase Phone Number Verification service, implementing JWT token verification using the Nimbus JOSE + JWT library. It includes the core service entry point, model classes for verified tokens, custom exception handling, and a verifier that checks JWT headers and claims against a remote JWKS. Feedback highlights a security vulnerability where the issuer claim was not validated against the specific project ID, potentially allowing tokens from other projects. Additionally, improvements were suggested for the token model to handle claim types more robustly and prevent potential class cast exceptions.

@lahirumaramba
Copy link
Copy Markdown
Member Author

@gemini-code-assist review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

release:stage Stage a release candidate release-note

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants