DEV Community

Discussion on: Securing your express/Node.js API with Firebase auth

Collapse
 
aech12 profile image
Alex Howez

I see what you mean, the password is being sent from Client to Server to Firebase Server but as far as I know it's not necessary to hash it at any point.
Hashing is done when you want to store the pass, not send it in HTTP methods.