Markdown

Connections and services

Firebase: credentials

You connect Firebase to your organization with a service account JSON or through OAuth so that the platform can create Firebase projects for push notifications and write the configuration into your apps.

On this page

Google / Firebase under Connections enables push notifications for apps: the platform creates a Firebase project in your Google Cloud account when needed and writes the configuration into the generated project files.

A service account JSON is the key of a technical account in Google Cloud that may create projects, and it is the recommended path. Connect with Firebase instead authorizes your Google account through OAuth and carries a Beta badge until Google has approved the platform app.

Creating the service account in Google Cloud

The service account needs permissions at the folder and billing account level.

  1. Open the Google Cloud Console or the Firebase Console and select your organization.
  2. Create a service account with at least these permissions:
    • Project Creator on the GCP folder for the new projects (resourcemanager.projects.create)
    • Billing Account User on the billing account (billing.resourceAssociations.create)
    • the right to enable services (firebase.projects.update, serviceusage.services.enable)
    • read access to list folders and billing accounts
  3. Create a JSON key and download the file.

Storing the JSON in the platform

  1. Under Connections → Google / Firebase, choose Service account JSON.
  2. Enter a Name and Slug.
  3. Paste the contents of the file into the Service account JSON field; a Firebase or GCP project ID is optional.
  4. Click Verify; the platform names any missing permissions, which you add in Google Cloud.

Only administrators should see the key; if you suspect it has leaked, create a new one and update the entry under Connections.

Enabling Firebase on an app

  1. Enable Firebase for the app under Features and select the connection.
  2. Choose Folder and Billing account. If the lists stay empty, check the service account’s read permissions.
  3. Save. The platform creates the Firebase project and stores its project IDs on the app; if one already exists there or on the connection, no new project is created.

Afterwards the platform writes the Firebase configuration and push settings into the generated project files and carries over existing app configs for web, iOS, and Android.

OAuth with your Google account (Beta)

  1. Under Connections → Google / Firebase, choose Connect with Firebase.
  2. Authorize your Google account and select the Firebase project.
  3. The platform stores the connection and, where possible, adds app configs and a service account.
Warning
If Google’s consent screen reports the app as unverified, stay with the service account JSON until it is approved.