Hacker News Reader

I didn't work with Firebase myself, isn't this something relevant?

https://firebase.google.com/docs/auth/admin/manage-cookies

That is what I'm using but I have to authenticate again every few days. If I used the client library it would autorefresh the token periodically, but that stores the refresh token in local storage. Since that is something you recommend against, I was wondering why.

Just to be clear, I'm not a security expert in any way, just learned myself while building things.

So here is what I'd refer to:

https://stackoverflow.com/questions/44133536/is-it-safe-to-s...

Regarding the Firebase, I see an open issue on this, so I guess we are not the only ones wondering :)

https://github.com/firebase/quickstart-nodejs/issues/194

Reply on news.ycombinator.com