One major difference between the two (not mentioned in the blog linked in [Jake](https://stackoverflow.com/users/9206039/jake-miyazaki)&#39;s [answer](https://stackoverflow.com/a/48799174/1763012)) is **pricing**. Auth0&#39;s pricing increases pretty quick along with the number of active users ([source](https://auth0.com/pricing/)) whereas Firebase Auth is free to use; you only pay for optional features like SMS, and database usage in case you need to [store additional user metadata](https://firebase.google.com/docs/auth/web/custom-auth).

See [this question](https://stackoverflow.com/a/44161502/1763012) for more about Firebase Auth pricing.

I&#39;m trying to get my server re-setup as a Lemp stack

The issue I am now running into is installing PHP 7 **without** Apache, since nGinx will be my webserver.

So, I&#39;ve added `ppa:ondrej/php`. ran `apt-get update`, and tried to install just php7.0 via `apt-get install php7.0`

`--nodeps` flag does not work, as I am on Ubuntu 15.10

And I am presented with:

    The following extra packages will be installed:
      apache2 apache2-bin apache2-data apache2-utils libapache2-mod-php7.0 libapr1
      libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.1-0 libqdbm14
      php-common php-readline php7.0 php7.0-cli php7.0-common php7.0-json
      php7.0-opcache php7.0-readline
    Suggested packages:
      apache2-doc apache2-suexec-pristine apache2-suexec-custom php-pear
      php-user-cache
    The following NEW packages will be installed:
      apache2 apache2-bin apache2-data apache2-utils libapache2-mod-php7.0 libapr1
      libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap liblua5.1-0 libqdbm14
      php php-common php-readline php7.0 php7.0-cli php7.0-common php7.0-json
      php7.0-opcache php7.0-readline

I **do not want** apache anywhere near my server, so how can I install php7 without it?  Short of compiling from source (as this makes it difficult at best to keep it updated)


Ubuntu Server Installing PHP 7 WITHOUT Apache

I&#39;m running Vagrant (1.8.1) + VirtualBox (5.0.12) on Windows 7 and trying to boot up a Windows 7 image (modernIE/w7-ie8). However, I get this error:

    ---------------------------
    VirtualBox - Error In supR3HardenedWinReSpawn
    ---------------------------
    &lt;html&gt;&lt;b&gt;NtCreateFile(\Device\VBoxDrvStub) failed: 0xc0000034 STATUS_OBJECT_NAME_NOT_FOUND (0 retries) (rc=-101)&lt;/b&gt;&lt;br/&gt;&lt;br/&gt;Make sure the kernel module has been loaded successfully.&lt;br&gt;&lt;br&gt;&lt;!--EOM--&gt;where: supR3HardenedWinReSpawn
    what:  3
    VERR_OPEN_FAILED (-101) - File/Device open failed.

    Driver is probably stuck stopping/starting. Try &#39;sc.exe query vboxdrv&#39; to get more information about its state. Rebooting may actually help.&lt;/html&gt;
    ---------------------------
    OK
    ---------------------------


I ran the query command, but the service &quot;is not found&quot;.

    &gt; sc.exe query vboxdrv
    [SC] EnumQueryServicesStatus:OpenService FAILED 1060:

    The specified service does not exist as an installed service.

I tried rebooting, too. Nothing.

Cannot boot Windows guest in VirtualBox without kernel module error

How does http://auth0.com&#39;s authentication features compare to Firebase&#39;s authentication?

Does Auth0.com, on the Free or Silver plan, provide any authentication features that Firebase does not provide?

What is the difference between Firebase auth and Auth0 authentication

<p>How does <a href="http://auth0.com&#x27;s" target="_blank" rel="noopener noreferrer">http://auth0.com's</a> authentication features compare to Firebase's authentication?</p>
<p>Does Auth0.com, on the Free or Silver plan, provide any authentication features that Firebase does not provide?</p>


I was wondering whether it is **possible** to actually **authenticate** to the Firebase **REST API withouth** using the **custom authentication**?

I&#39;ve worked with Firebase now for some time and I&#39;m currently thinking about migrating a backend of mine to Firebase.
The app that uses the backend currently uses a REST API and does not need realtime data at all.
Thus I&#39;d like to use only the REST API and not the full Android framework on the clients.

**Is it possible to get an auth token using the mail &amp; password authentication of Firebase via HTTP-requests?**

In the [old docs][1] I&#39;ve only found a solution with custom login and in the [new docs][2] you seem to need a Google Service Account.

Any help or advice appreciated.


  [1]: https://www.firebase.com/docs/rest/guide/user-auth.html
  [2]: https://firebase.google.com/docs/reference/rest/database/user-auth

Using mail and password to authenticate via the REST API [Firebase]

Since upgrading to the newest version of Firebase (9.0.0), I can&#39;t get rid of the following two errors when authenticating a user through `signInWithEmailAndPassword()`. Does anyone have an idea what&#39;s going on?

 

        05-19 18:09:49.245 23550-23589/[PACKAGE] E/DynamiteModule: Failed to load 
        module descriptor class: Didn&#39;t find class 
        &quot;com.google.android.gms.dynamite.descriptors.com.google.firebase.auth.ModuleDescriptor&quot; 
    on path: DexPathList[[zip file 
    &quot;/data/app/[PACKAGE]-3/base.apk&quot;],nativeLibraryDirectories=
    [/data/app/[PACKAGE]-3/lib/x86, /vendor/lib, /system/lib]]

And

        05-19 18:09:49.252 23550-23550/[PACKAGE] E/FirebaseApp: Firebase API 
    initialization failure.java.lang.reflect.InvocationTargetException
                                                                                 
          at java.lang.reflect.Method.invoke(Native Method)
          at com.google.firebase.FirebaseApp.zza(Unknown Source)
          at com.google.firebase.FirebaseApp.initializeApp(Unknown Source)
          at com.google.firebase.FirebaseApp.initializeApp(Unknown Source)
          at com.google.firebase.FirebaseApp.zzbu(Unknown Source)
          at com.google.firebase.provider.FirebaseInitProvider.onCreate(Unknown Source)
          at android.content.ContentProvider.attachInfo(ContentProvider.java:1748)
          at android.content.ContentProvider.attachInfo(ContentProvider.java:1723)
          at com.google.firebase.provider.FirebaseInitProvider.attachInfo(Unknown Source)
                                                                                       
    (...)    
    Caused by: java.lang.IncompatibleClassChangeError: The method &#39;java.io.File android.support.v4.content.ContextCompat.getNoBackupFilesDir(android.content.Context)&#39; was expected to be of type virtual but instead was found to be of type direct (declaration of &#39;com.google.firebase.iid.zzg&#39; appears in /data/data/[PACKAGE]/files/instant-run/dex/slice-com.google.firebase-firebase-iid-9.0.0_95503dc60ed409569d1585da411de93e6c633bf7-classes.dex)
          at com.google.firebase.iid.zzg.zzeC(Unknown Source)
          at com.google.firebase.iid.zzg.&lt;init&gt;(Unknown Source)
          at com.google.firebase.iid.zzg.&lt;init&gt;(Unknown Source)
          at com.google.firebase.iid.zzd.zzb(Unknown Source)
          at com.google.firebase.iid.FirebaseInstanceId.getInstance(Unknown Source)
          at java.lang.reflect.Method.invoke(Native Method)&#160;
          at com.google.firebase.FirebaseApp.zza(Unknown Source)&#160;
          at com.google.firebase.FirebaseApp.initializeApp(Unknown Source)&#160;
          at com.google.firebase.FirebaseApp.initializeApp(Unknown Source)&#160;
          at com.google.firebase.FirebaseApp.zzbu(Unknown Source)&#160; 
          at com.google.firebase.provider.FirebaseInitProvider.onCreate(Unknown Source)&#160;
          at android.content.ContentProvider.attachInfo(ContentProvider.java:1748)&#160;
          at android.content.ContentProvider.attachInfo(ContentProvider.java:1723)&#160;
          at com.google.firebase.provider.FirebaseInitProvider.attachInfo(Unknown Source)&#160;

    (...)
     


Android Firebase DynamiteModule: Failed to load module descriptor

As of version ^3.0.0, I&#39;m having a difficult time removing the auth state change listener. 

To start the listener per the documentation: 

    firebase.auth().onAuthStateChanged(function (user) {
        // handle it
    });

However, I cannot find anywhere in the documentation that refers to a remove auth state change listener. There is peculiar function on the Firebase.Auth class called `removeAuthTokenListener`. Unfortunately it&#39;s not documented ([firebase docs reference][1]). 

Via your browser&#39;s web console. 

    var auth = firebase.auth();
    auth.removeAuthTokenListener;

prints a function definition that takes one parameter. I tried to do the following:

    this.authListener = firebase.auth().onAuthStateChanged(function (user) {...});
    firebase.auth().removeAuthTokenListener(this.authListener);

but that didn&#39;t do anything. 

  [1]: https://firebase.google.com/docs/reference/js/index-all

Firebase stop listening onAuthStateChanged

I&#39;ve set up Firebase email/password authentication successfully, but for security reasons I want the user to confirm her/his email.
It says on Firebases website:
&gt; When a user signs up using an email address and password, a confirmation email is sent to verify their email address.

But when I sign up, I doesn&#39;t receive a confirmation email.

I&#39;ve looked and can only find a code for sending the password reset email, but not a code for sending the email confirmation.

I&#39;ve looked here:

https://firebase.google.com/docs/auth/ios/manage-users#send_a_password_reset_email

anyone got a clue about how I can do it?

Firebase confirmation email not being sent

We are being asked to set the OAuth redirect URI for Facebook (as shown below) in the instructions to set up Google Firebase to use Facebook login. 

We clicked in every menu for our app. Where is it? Could it be called something different?

From the [Firebase documentation][1]:

&gt;...make sure your OAuth redirect URI (e.g. my-app-12345.firebaseapp.com/__/auth/handler) is listed as one of your OAuth redirect URIs in your Facebook app&#39;s settings page on the Facebook for Developers site in the Product Settings &gt; Facebook Login config.


  [1]: https://firebase.google.com/docs/auth/ios/facebook-login#before_you_begin

Where does one set the Oauth Redirect URI for Facebook apps?

I read that when using JWT, there is no need to protect against CSRF attacks, for instance: &quot;[since you are not relying on cookies, you don&#39;t need to protect against cross site requests][1]&quot;.

However, something I do not understand: if I store the token in `localStorage` (as I was advised [on a tutorial of the same website][2]), what prevents an attacker to forge a malicious request by reading my `localStorage` instead of my cookies?

Since it was generated on the server side, I don&#39;t get how I could use a token for a client request without it being stored somewhere on the client.

  [1]: https://auth0.com/blog/2014/01/07/angularjs-authentication-with-cookies-vs-token/
  [2]: https://auth0.com/blog/2015/04/09/adding-authentication-to-your-react-flux-app/

CSRF protection with JSON Web Tokens

I&#39;m using Auth0 to handle authentication in my web app. I&#39;m using ASP.NET Core v1.0.0 and Angular 2 rc5 and I don&#39;t know much about authentication/security in general.

In the [Auth0 docs for ASP.NET Core Web Api][1], there are two choices for the JWT algorithm being RS256 and HS256. This may be a dumb question but:

**What&#39;s the difference between RS256 and HS256? What are some use cases (if applicable)?**


  [1]: https://auth0.com/docs/quickstart/backend/aspnet-core-webapi/01-authorization

RS256 vs HS256: What&#39;s the difference?

What is the difference between OAuth 2.0 and Auth0? Which one should I use to develop the authentication system?

OAuth 2.0 vs Auth0

# Confusion about API auth types in Laravel?


I&#39;m currently learning how to create an API in Laravel and I found myself into this confusing concepts. After a few days of research and practice, I could finally understand enough this concepts to make a mini-guide. I had to look into a lot of separate webpages so I will make my best attempt to explain the relationship between them. 

Content Type	Original Author	Original Content on Stackoverflow
Question	Basem	View Question on Stackoverflow
Solution 1 - Firebase Authentication	Aleksi	View Answer on Stackoverflow

What is the difference between Firebase auth and Auth0 authentication

Firebase Authentication Problem Overview

Firebase Authentication Solutions

Solution 1 - Firebase Authentication

Cannot boot Windows guest in VirtualBox without kernel module error

Ubuntu Server Installing PHP 7 WITHOUT Apache

Attributions