Firebase Admin credentials error. Cannot connect to database.

Answered

European sprat posted this in #help-forum

European spratOP

2024-01-09T13:02:55.000Z

Im using firebase with firebase admin and the regular firebase credentials.

To use firebase admin I have to aquire a list of credentials from a service account.

When I use the private key in admin.credential.cert({}) it shoots this error:

â¨¯ Error: secretOrPrivateKey must be an asymmetric key when using RS256
    at module.exports [as sign] (/var/task/node_modules/jsonwebtoken/sign.js:130:22)

after reading a lot on stack overflow and netlify (i have the deployment there)

I made it work like this once:

 credential: admin.credential.cert({
          privateKey: JSON.parse(
            `${process.env.CHESSFORTUNE_ADMIN_SDK_PRIVATE_KEY}`
          ),

But the company asked to shoot down that deployment, and now it does not work, it shoots the same error again and again, and now Im tired and need help to fix this bug.

On local dev I used ' " private key" ' and then parsed that string, that did the job on local, but on netlify production does not work that way.

Let me know if you can help me.

Answered by Ray

then your variable didn't set correctly

View full answer

47 Replies

@European sprat Im using firebase with firebase admin and the regular firebase credentials. To use firebase admin I have to aquire a list of credentials from a service account. When I use the private key in admin.credential.cert({}) it shoots this error: bash â¨¯ Error: secretOrPrivateKey must be an asymmetric key when using RS256 at module.exports [as sign] (/var/task/node_modules/jsonwebtoken/sign.js:130:22) after reading a lot on stack overflow and netlify (i have the deployment there) I made it work like this once: js credential: admin.credential.cert({ privateKey: JSON.parse( `${process.env.CHESSFORTUNE_ADMIN_SDK_PRIVATE_KEY}` ), But the company asked to shoot down that deployment, and now it does not work, it shoots the same error again and again, and now Im tired and need help to fix this bug. On local dev I used ' " private key" ' and then parsed that string, that did the job on local, but on netlify production does not work that way. Let me know if you can help me.

Ray

2024-01-09T13:17:17.000Z

hi, try this

credential: admin.credential.cert({
          privateKey: `${process.env.CHESSFORTUNE_ADMIN_SDK_PRIVATE_KEY}`.replace(/\\n/g, '\n')
          ),

@Ray hi, try this ts credential: admin.credential.cert({ privateKey: `${process.env.CHESSFORTUNE_ADMIN_SDK_PRIVATE_KEY}`.replace(/\\n/g, '\n') ),

European spratOP

2024-01-09T13:31:40.000Z

Hi ray, it gave me the same error.

I read somewhere that using the latest lts of node it would fix the issue, and localy it did.

But on deploy I have the same issue.

@European sprat Hi ray, it gave me the same error. I read somewhere that using the latest lts of node it would fix the issue, and localy it did. But on deploy I have the same issue.

Ray

2024-01-09T13:33:44.000Z

have you try setting the nodejs version on netlify?

I think you could set it to latest lts

@Ray have you try setting the nodejs version on netlify?

European spratOP

2024-01-09T14:19:09.000Z

Hi again ray, did not work, but it worked for local.

@European sprat Hi again ray, did not work, but it worked for local.

Ray

2024-01-09T14:19:40.000Z

same error?

European spratOP

2024-01-09T14:20:55.000Z

Yeah:

Error: secretOrPrivateKey must be an asymmetric key when using RS256

I'll try again with the old solutions to see if with the latest lts one of those may work.

@European sprat Yeah: bash Error: secretOrPrivateKey must be an asymmetric key when using RS256

Ray

2024-01-09T14:40:41.000Z

does the CHESSFORTUNE_ADMIN_SDK_PRIVATE_KEY look like this?
-----BEGIN PRIVATE KEY-----\n<YOUR_PRIVATE_KEY>\n-----END PRIVATE KEY-----\n

European spratOP

2024-01-09T14:41:08.000Z

Yeah, just like that.

Ray

2024-01-09T14:43:33.000Z

that's odd it works only on local

have you tried hard coding it?

instead of env variable

European spratOP

2024-01-09T14:48:58.000Z

No, I did not think of that. Lets see.

European spratOP

2024-01-09T15:03:16.000Z

Well that did it, but it broke my middleware Jajajaja

One step closer thats good

Can I pass my middleware function here?

This is my middleware function, it uses a cookie to check if user is logged in and has valid credentials.

export async function middleware(request, response) {
  const session = request.cookies.get("session");
  //Return to /login if don't have a session
  if (!session) {
    return NextResponse.redirect(new URL("/login", request.url));
  }


  //Call the authentication endpoint
  const responseAPI= await fetch(`${request.nextUrl.origin}/api/login`, {
    headers: {
      Cookie: `session=${session?.value}`,
    },
  });

  //Return to /login if token is not authorized
  if (responseAPI.status !== 200) {
    console.log("Unauthorized");
    return NextResponse.redirect(new URL("/login", request.url));
  }

  return NextResponse.next();
}

@European sprat Well that did it, but it broke my middleware Jajajaja

Ray

2024-01-09T15:04:49.000Z

then your variable didn't set correctly

Answer

European spratOP

2024-01-09T15:04:49.000Z

but now it does not let me

@European sprat but now it does not let me

Ray

2024-01-09T15:05:03.000Z

let you what?

@Ray then your variable didn't set correctly

European spratOP

2024-01-09T15:05:31.000Z

it does not let me see other than the unprotected routes, but the fetch to firebase using the key works just fine.

Ray

2024-01-09T15:06:04.000Z

it redirect you to /login?

European spratOP

2024-01-09T15:06:42.000Z

yeah.

@European sprat yeah.

Ray

2024-01-09T15:06:52.000Z

check the log on /api/login

or can you show the code on /api/login?

European spratOP

2024-01-09T15:09:44.000Z

Going

export async function GET(request) {
  const session = cookies().get("session").value || "";

  if (!session) {
    return NextResponse.json({ isLogged: false }, { status: 401 });
  }

  const decodedClaims = await auth().verifySessionCookie(session, true);

  //WHEN ALL ADMINS ARE CREATED UNCOMMENT THE SNIPPETS BELOW

  /*const admin= await getAuth()
  .getUser(decodedClaims.uid)
  .then((userRecord) => {
   return userRecord.toJSON()})
  .catch((error) => {
    console.log('Error fetching user data:', error);
  });*/

  if (!decodedClaims /*|| 'admin' in admin.customClaims == false*/) {
    return NextResponse.json({ isLogged: false }, { status: 401 });
  }

  return NextResponse.json({ isLogged: true }, { status: 200 });
}

@European sprat js export async function GET(request) { const session = cookies().get("session").value || ""; if (!session) { return NextResponse.json({ isLogged: false }, { status: 401 }); } const decodedClaims = await auth().verifySessionCookie(session, true); //WHEN ALL ADMINS ARE CREATED UNCOMMENT THE SNIPPETS BELOW /*const admin= await getAuth() .getUser(decodedClaims.uid) .then((userRecord) => { return userRecord.toJSON()}) .catch((error) => { console.log('Error fetching user data:', error); });*/ if (!decodedClaims /*|| 'admin' in admin.customClaims == false*/) { return NextResponse.json({ isLogged: false }, { status: 401 }); } return NextResponse.json({ isLogged: true }, { status: 200 }); }

Ray

2024-01-09T15:13:11.000Z

try this

// middleware
export async function middleware(request, response) {
  const session = request.cookies.get("session");
  //Return to /login if don't have a session
  if (!session?.value) {
    return NextResponse.redirect(new URL("/login", request.url));
  }


  //Call the authentication endpoint
  const responseAPI= await fetch(`${request.nextUrl.origin}/api/login`, {
    headers: {
      session: session.value,
    },
  });

  //Return to /login if token is not authorized
  if (responseAPI.status !== 200) {
    console.log("Unauthorized");
    return NextResponse.redirect(new URL("/login", request.url));
  }

  return NextResponse.next();
}

// api/login/route.js
export async function GET(request) {
  const session = request.headers.get('session')

  if (!session) {
    return NextResponse.json({ isLogged: false }, { status: 401 });
  }

  const decodedClaims = await auth().verifySessionCookie(session, true);

  //WHEN ALL ADMINS ARE CREATED UNCOMMENT THE SNIPPETS BELOW

  /*const admin= await getAuth()
  .getUser(decodedClaims.uid)
  .then((userRecord) => {
   return userRecord.toJSON()})
  .catch((error) => {
    console.log('Error fetching user data:', error);
  });*/

  if (!decodedClaims /*|| 'admin' in admin.customClaims == false*/) {
    return NextResponse.json({ isLogged: false }, { status: 401 });
  }

  return NextResponse.json({ isLogged: true }, { status: 200 });
}

European spratOP

2024-01-09T15:29:38.000Z

Nope. I think I will just let the middleware out this time. It works local, but it does not work on netlify.

@European sprat Nope. I think I will just let the middleware out this time. It works local, but it does not work on netlify.

Ray

2024-01-09T15:30:06.000Z

any error?

European spratOP

2024-01-09T15:31:11.000Z

Nope, it just does not authorize the user to go to protected paths but it does not show any error

and in development is working fine.

@Ray try this ts // middleware export async function middleware(request, response) { const session = request.cookies.get("session"); //Return to /login if don't have a session if (!session?.value) { return NextResponse.redirect(new URL("/login", request.url)); } //Call the authentication endpoint const responseAPI= await fetch(`${request.nextUrl.origin}/api/login`, { headers: { session: session.value, }, }); //Return to /login if token is not authorized if (responseAPI.status !== 200) { console.log("Unauthorized"); return NextResponse.redirect(new URL("/login", request.url)); } return NextResponse.next(); } // api/login/route.js export async function GET(request) { const session = request.headers.get('session') if (!session) { return NextResponse.json({ isLogged: false }, { status: 401 }); } const decodedClaims = await auth().verifySessionCookie(session, true); //WHEN ALL ADMINS ARE CREATED UNCOMMENT THE SNIPPETS BELOW /*const admin= await getAuth() .getUser(decodedClaims.uid) .then((userRecord) => { return userRecord.toJSON()}) .catch((error) => { console.log('Error fetching user data:', error); });*/ if (!decodedClaims /*|| 'admin' in admin.customClaims == false*/) { return NextResponse.json({ isLogged: false }, { status: 401 }); } return NextResponse.json({ isLogged: true }, { status: 200 }); }

Ray

2024-01-09T15:32:31.000Z

it doesn't work with this code?

European spratOP

2024-01-09T15:32:48.000Z

Wait

it is working now

Lol.

Ray

2024-01-09T15:33:07.000Z

European spratOP

2024-01-09T15:33:28.000Z

Sometimes happens that it works and you arent sure how?

Hey Ray

thanks a lot bro

Now I can go to sleep finally

You have my gratituted and my best wishes.

If I may a final question to close this topic:

What docs (or videos if you want) read about middleware and how it works? (outside documentation)

And any other advice on how to get better with next, I'll be gratefull.

Thanks a lot my friend.

@European sprat Thanks a lot my friend.

Ray

2024-01-09T15:51:06.000Z

no prob, for the doc about middleware, I just read the official doc ðŸ˜†

European spratOP

2024-01-09T15:53:19.000Z

Thanks bro.