Installation

Include cone.firebase to install dependencies in your application’s setup.py.

Configuration

Adopt your application config ini file to define firebase related API keys.

[app:my_app]
use = egg:cone.app#main

cone.plugins =
    cone.firebase

cone.authenticator = firebase

firebase.web_api_key = xxx
firebase.service_account_json_file = path/to/service_account.json

also in your ugm.xml you can optionally add the firebase_user checkbox:

<users_form_attrmap>
    ...
    <elem>
        <key>firebase_user</key>
        <value>Firebase User</value>
    </elem>
</users_form_attrmap>

When you want to upgrade an existing user to FB, you can do this by checking firebase_user in the user edit form, butt attention: you have to manually enter the password since the firebase API expects the password in cleartext.

1.1.2 (2026-10-31)

• Sort the imports with ruff (one per line, from imports first, no sections) and format the code with ruff format (90 characters per line, single quotes). [rnix]

• Add import sorting (I rules) and the formatter settings to the ruff configuration in pyproject.toml. [rnix]

1.1.1 (2026-10-24)

• Do not log the password if encoding the login data fails. [rnix]

• Register the user event handlers by calling classhandler.handler. Used as decorator it returns itself, so on_user_created, on_user_modified and on_user_deleted were bound to zope.event.classhandler.handler and calling them directly silently did nothing. [rnix]

• unregister_device_token_for_user does nothing for an unknown login, register_device_token_for_user raises a KeyError naming the login. Resolving the user for a login is no longer repeated in three functions. [rnix]

• cone.firebase.testing: The fake firebase_admin follows the API of firebase_admin.auth. create_user takes uid, user functions return a UserRecord and raise UserNotFoundError for an unknown user. FirebaseLayer also patches management.auth, restores everything it patches and removes only its own event handlers on tear down. [rnix]

• Remove unused imports and variables ruff flags. on_user_deleted keeps the auth.get_user call, it raises UserNotFoundError for an unknown user. Remove the broken Message.__str__ from the fake firebase_admin in cone.firebase.testing. [rnix]

• Use logger.warning instead of the deprecated logger.warn. [rnix]

• Modernise the code ruff flags as outdated: class X(object), typing.Dict/List/Tuple over builtins, redundant open() mode. Behaviour unchanged. super(Class, self) is kept, see cone.app. [rnix]

• Pin the ruff rule selection in pyproject.toml. [rnix]

• Pin setuptools<82.0.0 in mx.ini. pyramid 2.0.2 still imports pkg_resources, which setuptools 82 removed. [rnix]

1.1.0 (2026-02-03)

• Refactor package layout to use pyproject.toml and implicit namespace packages. [rnix]

• Initial. [rnix, zworkb]