Firebase REST API - 使用id令牌验证请求不起作用

Question

I'm working on a Unity C# project and trying to authenticate a request to Realtime Database using the id token Firebase returns after a user signs in, but it says the request is unauthorized. Here's my sign-in code ( AuthResponse wraps the response body):

WWWForm form = new WWWForm();
form.AddField("email", email);
form.AddField("password", password);

using (UnityWebRequest www = UnityWebRequest.Post("https://www.googleapis.com/identitytoolkit/v3/relyingparty/verifyPassword?key=" + API_KEY, form))
{
    yield return www.SendWebRequest();

    if (www.isNetworkError || www.isHttpError)
    {
        Debug.Log($"Login failed: {www.error}");
        callback(false);
    }
    else
    {
        AuthResponse data = www.downloadHandler.text.FromJson<AuthResponse>();
        ID_TOKEN = data.idToken;
    }
}

And my read request:

string url = $"{DATABASE_URL}{path}.json";
if (auth) url += $"?auth={ID_TOKEN}";
using (UnityWebRequest www = UnityWebRequest.Get(url))
{
    yield return www.SendWebRequest();

    if (www.isNetworkError || www.isHttpError)
    {
        Debug.Log($"Read failed: {www.error}");
    }
}

My database has public rules and everything works without the auth parameter. What am I missing?

Edit: This is the token response:

{
  "kind": "identitytoolkit#SignInWithPasswordResponse",
  "localId": <LOCAL_ID>,
  "email": <EMAIL>,
  "displayName": "",
  "idToken": <ID_TOKEN>,
  "registered": true
}

This is the full read request url: https://<PROJECT_ID>.firebaseio.com/testing/flatString.json?auth=<ID_TOKEN>

Answer 1

instead of doing your own httppost use Firebase Unity SDK

Before you can use Firebase Authentication, you need to:

Register your Unity project and configure it to use Firebase.

If your Unity project already uses Firebase, then it's already registered and configured for Firebase.

If you don't have a Unity project, you can download a sample app.

Add the Firebase Unity SDK (specifically, FirebaseAuth.unitypackage) to your Unity project.