How to Implement Full Flutter-Firebase Authentication with a Custom JWT Backend

·1 views

A developer guide outlines a complete authentication flow for Flutter apps that goes beyond basic Firebase sign-in to include secure backend API access. The approach uses Firebase to handle device-side identity, then exchanges the Firebase ID token for a short-lived custom JWT issued by the app's own backend server. This two-hop chain ensures the backend remains decoupled from Firebase infrastructure and allows developers to embed custom claims such as user roles, tenant IDs, and plan limits in their own tokens. The custom JWT also gives developers finer control over token expiry and revocation, addressing limitations of Firebase ID tokens, which last up to an hour and are difficult to invalidate. The guide covers Flutter-side sign-in code, secure token handling in memory, and backend verification using the Firebase Admin SDK before issuing the custom JWT.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Why navigator.clipboard.writeText() Silently Fails When Users Switch Tabs

A subtle browser behavior can cause clipboard copy functions to fail without any visible error when users switch tabs or windows mid-operation. The Async Clipboard API requires the document to have active focus at the exact moment writeText() is called, not merely when the user first clicked. If an awaited operation — such as a fetch request — creates a timing gap between the click and the clipboard call, focus may have shifted, causing the browser to silently reject the promise with a NotAllowedError. Common fixes like loading spinners, try/catch blocks, or retries do not resolve the issue because they fail to address the root cause of lost document focus. The recommended solution is to pass a promise directly into ClipboardItem so the clipboard slot is claimed during the original click gesture, while the data resolves asynchronously afterward.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

GPT4All Lets You Run AI Language Models Locally Without Internet Access

GPT4All is a free, open-source desktop application that allows users to run large language models locally on Windows, macOS, and Linux without an internet connection. It supports GGUF-format models from sources like Hugging Face and can also connect to API-based providers such as OpenAI, Groq, and Mistral. The application can be installed on Ubuntu and Debian-based systems via an installation binary or Flatpak, while Windows and macOS users have dedicated installers available. GPT4All also supports retrieval-augmented generation (RAG), enabling users to chat with their own local documents. Additionally, it includes a built-in API server that can be secured and made remotely accessible via HTTPS behind a reverse proxy.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

NVIDIA Dynamo and vLLM Enable Scalable LLM Inference Across Multi-GPU Setups

NVIDIA Dynamo is an open-source inference framework designed to deploy large-scale generative AI models across multi-node, multi-GPU environments with high throughput and low latency. It supports both aggregated serving for single-GPU configurations and disaggregated serving, which separates prompt processing and response generation across different GPUs for independent optimization. The framework integrates with backends such as vLLM, SGLang, and NVIDIA TensorRT-LLM, using etcd for service discovery and NATS for inter-component message passing. A deployment guide covers infrastructure setup, container configuration via Docker Compose, and two serving patterns using vLLM as the inference backend. The setup requires a minimum of one GPU for aggregated serving and four GPUs for disaggregated serving, along with the NVIDIA Container Toolkit and Docker Engine.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Deploy FastAPI with Gunicorn and Nginx on Ubuntu 24.04

A technical guide outlines the steps to deploy a FastAPI application on Ubuntu 24.04 using Gunicorn as the application server and Nginx as a reverse proxy. FastAPI, a modern Python web framework, supports asynchronous programming and ships with built-in interactive API documentation via Swagger UI. The setup uses Gunicorn with a Uvicorn worker class to handle ASGI support, while a systemd unit file manages the Gunicorn process as a persistent background service. Nginx sits in front of the application to handle incoming web traffic and route requests through a Unix socket. The deployment is completed by securing the application with a free SSL certificate, making it accessible over HTTPS on a custom domain.

0 comments Read more at DEV Community