hi folks, i made a repo containing a bunch of scri...
# showcasej
jianjie
08/01/2021, 9:45 AMhi folks, i made a repo containing a bunch of scripts my team used to migrate our users from firebase auth to supabase auth ๐ https://github.com/liaujianjie/firebase-to-supabase-auth-migrator
jianjie
08/01/2021, 9:48 AMwe used a variant of the script to migrate ~200k users. i won't be writing new features into the scripts but PRs are welcome. ๐
k
Kosh
08/01/2021, 1:39 PM@User thanks for the repo, it helped me alot migrate myself.. how did you handle the password logins tho? did you had to send the users reset password manually?
j
jianjie
08/02/2021, 2:10 AM@User fortunately for me, i didn't allow password logins. if i had, i would've implemented a UI to let the user send themselves a password reset email.
k
Kosh
08/02/2021, 7:08 AMYeah, that's what I thought as well, but thought maybe there is a way to decrypt passwords from firebase.
j
jianjie
08/02/2021, 8:09 AMI'm no security expert, but I don't think you can decrypt hashed passwords
jianjie
08/02/2021, 8:10 AMIIRC you can still retrieve the hashing algorithm and salt used for Firebase Auth
jianjie
08/02/2021, 8:10 AMBut I'm not sure if you can configure the hashing algorithm and salt on GoTrue
k
Kosh
08/02/2021, 10:02 AMI don't think we can configure this in supabase. I'll try and see what I can do about it. Thanks alot
b
burggraf
08/02/2021, 2:10 PMHere's a possible technique: https://news.ycombinator.com/item?id=4078561
burggraf
08/02/2021, 2:10 PMI'm not saying this is possible, but my theory is this:
burggraf
08/02/2021, 2:11 PMIf you can keep some code around to check their existing Firebase password against their existing Firebase hash, then at the time they log in, re-hash the password for Supabase / GoTrue and save the new version.
burggraf
08/02/2021, 2:11 PMIt's a bit of a longshot, but might work.
k
Kosh
08/02/2021, 2:14 PMI was thinking of the same, I could ask them to login again and verify their entered password with the scrypt from firebase but then I need to expose these values somewhere. as of now, im going to the hard way, as soon new version is installed and i detect someone is logged in via password, then I show them a reset password screen .
b
burggraf
08/02/2021, 2:17 PMYeah, I was trying to accomplish a completely stealth version, so the user would never even know they were migrated.
k
Kosh
08/02/2021, 2:38 PMcount me in if you could make this work. i'll probably make the release on the weekend or the week after. let me know you figured something out ๐
b
burggraf
08/02/2021, 3:05 PMIt's definitely a back burner thing for me, but I'll let you know if I get anywhere.
k
Kosh
08/02/2021, 3:11 PMThank you :))
b
burggraf
08/02/2021, 4:27 PMInian says itโs definitely possible, so thatโs good. ๐
k
Kosh
08/02/2021, 4:28 PMpossible without working solution is just a word in the air floating :p
Kosh
08/02/2021, 4:28 PMhaha
b
burggraf
08/02/2021, 4:29 PMNothing is impossible for me. Unless I donโt feel like doing it.
k
Kosh
08/02/2021, 4:30 PMthat, for sure I agree with. buuuut, what can we do it to make u feel like it? ๐
b
burggraf
08/02/2021, 4:31 PMIโll look at it, donโt worry. ๐
k
Kosh
08/02/2021, 4:32 PMim not worried but rather hyped now.