0
votes

I'm trying to get the hashed passwords of my users using Firebase Admin SDK.

From the documentation,

Optional passwordHash


passwordHash: string


The user’s hashed password (base64-encoded), only if Firebase Auth hashing algorithm (SCRYPT) is used. If a different hashing algorithm had been used when uploading this user, as is typical when migrating from another Auth system, this will be an empty string. If no password is set, this is null. This is only available when the user is obtained from listUsers().

But after retrieving a UserRecord object, the passwordHash property is always set to 'UkVEQUNURUQ=', irrespective of that user's password.

Users are created in the backend using the admin SDK like so

admin.auth().createUser({
  uid: uid,
  email: email,
  phoneNumber: phoneNumber,
  password: password
})

Why are the hashes all the same?

1

1 Answers

1
votes

Apparently, this is a known bug.