Auth + bot defense services
Auth + bot defense services
Firebase Spark is the single auth backend for every site (and for extensions, paired with a license-key fallback). The provider list is locked at 6 active sign-in providers — see firebase-auth.md for the full table. App Check + reCAPTCHA Enterprise sit in front of Firestore.
| Service | Status | One-line role |
|---|---|---|
| firebase-spark.md | active | Auth + user DB (Firestore) on the free Spark tier |
| firebase-auth.md | active | The 6-provider sign-in stack wired into the Firebase Auth project |
| microsoft-sign-in.md | active | Microsoft / Entra ID OAuth provider (NEW 2026-06-20) |
| passkeys.md | active | Passkeys / WebAuthn — passwordless, phish-resistant (NEW 2026-06-20) |
| app-check-firebase.md | active | Gates Firestore calls to verified clients |
| recaptcha-enterprise.md | active | Bot risk assessments at sensitive endpoints |
| supabase.md | fallback | Auth + Postgres swap target if Firebase Spark dies |
| clerk.md | fallback | Auth-only swap target |