This skill provides standardized patterns for integrating the Firebase Admin SDK within Next.js 14+ server environments, ensuring robust security through the mandatory use of the 'server-only' package. It facilitates the implementation of Role-Based Access Control (RBAC) via custom claims, secure singleton initialization of Admin services (Auth, Firestore, Storage), and reliable token verification in middleware and API routes. By automating best practices for credential handling and environment variable configuration, it prevents accidental exposure of sensitive service account keys to the client bundle.
Key Features
01Singleton Admin SDK initialization for optimal resource management
02Automated environment variable validation and private key formatting
03Standardized patterns for server-side token verification and user management
04Secure 'server-only' protection to prevent client-side credential leaks
05Role-Based Access Control (RBAC) implementation using custom user claims
060 GitHub stars
Use Cases
01Implementing multi-tenant or role-based authorization systems using Firebase Custom Claims
02Setting up privileged backend access to Firestore and Storage in Next.js Server Actions
03Verifying session tokens in Next.js Middleware to protect sensitive server-side routes
