Azure

Firebase token in. No secret anywhere.

Validate the token. Deploy with a managed identity.

What you'll learn

How to validate a Firebase ID token in .NET
Where roles must come from
How a managed identity removes secrets

Azure 9 steps 51 seconds May 30, 2026 —

Was this useful?

Share

Understand it one step at a time

The short runs these in order in about 51 seconds. Here they are written out — pick any step to jump the short straight to it.

1 Step 1 of 9

A real token

The Flutter app signs in with Firebase and gets an ID token.

Free app · no app store

These are built for a phone

Every short is drawn at full portrait height, the shape a phone already is. Installed, it opens full-bleed with no address bar across the top — and the whole library reads offline.

Read deeper on Azure

Twenty seconds gets the shape of an idea across. These go into how it behaves in production.

AI Bot Attacks on a Mobile App Login, and How Azure Stops Them

A script tries 8,000 passwords a minute against your login API at 3am. Rate limiting, smart lockout and Defender for Cloud make speed the losing move.
Azure Key Vault Explained: The One Secret Tutorials Never Remove

Moving every secret into Key Vault leaves exactly one behind: the credential that opens the vault. A managed identity is what removes it.
How to Secure a Mobile API on Azure in Five Steps, in the Right Order

HTTPS only, authentication, authorization, secrets and monitoring: five steps to secure a mobile API on Azure, and why the order carries most of the value.

More shorts

Azure

Money debited. Order failed.

10 steps · 56s
Azure

One tap. Two orders.

10 steps · 57s
Azure

1.6 million downloads. One photo.

10 steps · 58s

New technical articles, Azure AI and GitHub Copilot updates, and upcoming events. No spam, unsubscribe anytime.