Firebase Authentication

# CHAPTER 23

Firebase Authentication #

1. Introduction #

2. Learning Objectives #

• Connect an Android Studio project to a Google Firebase project.

• Configure the google-services.json file and Gradle dependencies.

• Implement the Email/Password User Registration flow.

• Implement the User Sign-In and Sign-Out functionality.

• Check the current session state to route users to the Dashboard or the Login screen.

• Handle Firebase asynchronous Tasks and Exceptions gracefully.

3. Step 1: Connecting to Firebase #

1. 1. Go to the Firebase Console in your browser.

1. 2. Click "Add Project", name it (e.g., "KotlinCourseApp"), and disable Google Analytics for now.

1. 3. Once created, click the Android Icon to add an app.

1. 4. Enter your Android Package Name (found at the top of your MainActivity.kt, e.g., com.example.myapp).

1. 5. Download the google-services.json file.

1. 6. Switch Android Studio to "Project" view and drag the google-services.json file directly into the app folder.

4. Step 2: Gradle Configuration #

In your project-level build.gradle.kts (or build.gradle): Add the Google Services dependency inside buildscript { dependencies { ... } } or in the plugins block depending on your Gradle version.

plugins {
    id("com.google.gms.google-services") version "4.4.1" apply false
}

In your app-level build.gradle.kts (Module :app): Apply the plugin at the top, and add the Authentication dependency:

plugins {
    id("com.google.gms.google-services")
}

dependencies {
    // Import the Firebase BoM (Bill of Materials) for version management
    implementation(platform("com.google.firebase:firebase-bom:32.7.1"))
    
    // Declare the dependency for Firebase Authentication
    implementation("com.google.firebase:firebase-auth")
}

*Click "Sync Now"!* Finally, go back to the Firebase Console in your browser, click Authentication -> Get Started, and explicitly enable the Email/Password sign-in provider.

5. Step 3: Registering a New User (Sign Up) #

import android.os.Bundle
import android.widget.Button
import android.widget.EditText
import android.widget.Toast
import androidx.appcompat.app.AppCompatActivity
import com.google.firebase.auth.FirebaseAuth

class RegisterActivity : AppCompatActivity() {

    // 1. Declare the Auth instance
    private lateinit var auth: FirebaseAuth

    override fun onCreate(savedInstanceState: Bundle?) {
        super.onCreate(savedInstanceState)
        setContentView(R.layout.activity_register)

        // 2. Initialize Firebase Auth
        auth = FirebaseAuth.getInstance()

        val emailInput = findViewById<EditText>(R.id.emailInput)
        val passwordInput = findViewById<EditText>(R.id.passwordInput)
        val registerBtn = findViewById<Button>(R.id.registerBtn)

        registerBtn.setOnClickListener {
            val email = emailInput.text.toString().trim()
            val password = passwordInput.text.toString().trim()

            // Firebase requires passwords to be at least 6 characters!
            if (email.isNotEmpty() && password.length >= 6) {
                
                // 3. Call the Firebase creation function
                auth.createUserWithEmailAndPassword(email, password)
                    .addOnCompleteListener(this) { task ->
                        if (task.isSuccessful) {
                            // Success! The user is registered and logged in.
                            val user = auth.currentUser
                            Toast.makeText(this, "Welcome ${user?.email}!", Toast.LENGTH_SHORT).show()
                            // TODO: Navigate to Dashboard Activity
                        } else {
                            // Failure (e.g., Email already in use, bad format)
                            Toast.makeText(this, "Error: ${task.exception?.message}", Toast.LENGTH_LONG).show()
                        }
                    }
            }
        }
    }
}

6. Step 4: Signing In an Existing User #

loginBtn.setOnClickListener {
    val email = emailInput.text.toString().trim()
    val password = passwordInput.text.toString().trim()

    auth.signInWithEmailAndPassword(email, password)
        .addOnCompleteListener(this) { task ->
            if (task.isSuccessful) {
                // Success!
                Toast.makeText(this, "Login Successful!", Toast.LENGTH_SHORT).show()
                // Navigate to Dashboard
            } else {
                // Failure (e.g., Wrong password, user doesn't exist)
                Toast.makeText(this, "Login Failed: ${task.exception?.message}", Toast.LENGTH_LONG).show()
            }
        }
}

7. Step 5: Session Management (Routing) #

override fun onStart() {
    super.onStart()
    
    val currentUser = auth.currentUser
    if (currentUser != null) {
        // User is already signed in! Navigate directly to the Dashboard.
        val intent = Intent(this, DashboardActivity::class.java)
        startActivity(intent)
        finish() // Destroy the Login activity so they can't press "Back" to get to it
    }
}

8. Step 6: Signing Out #

logoutButton.setOnClickListener {
    FirebaseAuth.getInstance().signOut()
    
    // Send them back to the Login Screen
    val intent = Intent(this, LoginActivity::class.java)
    startActivity(intent)
    finish()
}

9. Firebase Coroutines (Advanced) #

*(Requires: implementation("org.jetbrains.kotlinx:kotlinx-coroutines-play-services:1.7.3"))*

viewModelScope.launch {
    try {
        // The coroutine pauses here until Firebase finishes! No callbacks!
        val result = auth.signInWithEmailAndPassword(email, password).await()
        println("Success: ${result.user?.email}")
    } catch (e: Exception) {
        println("Error: ${e.message}")
    }
}

10. Common Mistakes #

• Forgetting to Enable the Provider: Spending 3 hours debugging code because createUserWithEmailAndPassword throws an error, only to realize you never clicked the toggle to enable "Email/Password" inside the Firebase Web Console.

• Leaking the Login Screen: Using startActivity to go to the Dashboard without calling finish(). If the user hits the physical back button on their phone, they will return to the Login screen despite being fully logged in!

11. Best Practices #

• UX Feedback: Firebase network calls take 1–3 seconds. Always show a ProgressBar when the user clicks "Submit", and disable the button to prevent them from clicking it 5 times and initiating 5 simultaneous network requests.

12. Exercises #

1. 1. Setup a Firebase project and successfully sync the google-services.json with an empty Android app.

1. 2. Build a simple UI with two EditTexts and a "Register" button. Implement the Firebase Registration logic.

13. Coding Challenges #

14. MCQ Quiz with Answers #

15. Interview Questions #

• Q: Explain the structural hazards of utilizing traditional nested Callbacks (addOnCompleteListener) for Firebase authentication logic within a robust MVVM architecture. How does utilizing Coroutines and the .await() extension function mitigate these issues?

• Q: Detail the user experience (UX) and architectural imperatives of utilizing finish() or Intent flag manipulation (FLAG_ACTIVITY_CLEAR_TASK) immediately following a successful Firebase login execution.

• Q: Describe how Firebase manages session persistence. Under what programmatic conditions is the local authentication token invalidated?

16. Summary #

17. Next Chapter Recommendation #