Firebase-js-sdk: FR: Auth across subdomains

[gkadillak]

[REQUIRED] Describe your environment

• Operating System version: macOS Mojave Version 10.14.6
• Browser version: Google Chrome Version 74.0.3729.131
• Firebase SDK version: 5.5.9
• Firebase Product: auth

[REQUIRED] Describe the problem

Steps to reproduce:

We've transitioned to using Firebase for auth and the desire is to now use Firebase across subdomains, which Firebase does not support out of the box. I've done my research and I see that there's been a few forum items requesting this exact feature here and here. Ultimately, the posts link to this stackoverflow issue. As far as I can tell, the best reason for this is:

Firebase only supports single host origin sessions

Why is this a limitation for Firebase? The stackoverflow item also states that

Firebase Auth is looking into supporting cookies.

What is the status of this? Has it been funded? Is there a way to see progress of this project somewhere? We have a strong desire to avoid rolling our own subdomain auth system, so looking forward to hearing your response 🙂

[thefliik]

I wrote a blog post a while back describing how you can accomplish this using the current firebase auth API. Official support making this easier would still be very nice though.

[VFertak]

Hi, any progress on this issue?

[samhorlbeck]

Hi, while this is not currently on our roadmap we have added this as a feature request to our tracker (for internal folks: b/162973088).

[VFertak]

@samhorlbeck thanks a lot. Any workaround suggestions from your side?

[samhorlbeck]

I think @bojeil-google's response and discussion in the Stackoverflow response proposes the best workaround for the time being.