Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

[FR] Provide more details for SENDER_ID_MISMATCH if I have permission to see across projects

Open
#2,373 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
5/5
Estimated time
Over a week
Newbie friendliness
20/100
Issue type
Feature
Clarity
Needs clarification
Activity status
Stale
Tech stack
node.js, typescript

Research direction

No repository files or tests are named. First determine whether this request belongs in firebase-admin-node or in the Firebase portal, then review the existing verify-ID-token API and the linked Android SDK issue. Done means an agreed implementation scope that can identify the token's registered project only when the user has access to it.

Written by the indexing model from the issue text.

Description

needs-triage type: feature request

Is your feature request related to a problem? Please describe.

As a developer, I'd like to be able to verify an ID token across all projects that I have access to in Firebase. There is an existing API to do so today but requires specifying a project ID and providing the correct credentials for each project.

https://firebase.google.com/docs/auth/admin/verify-id-tokens#verify_id_tokens_using_the_firebase_admin_sdk

Describe the solution you'd like

During debugging, the SENDER_ID_MISMATCH response tells you that a token is registered against a different project than it's being used for, but does not tell you what project it is. Since the Firebase portal knows which projects I already have access to, it would be helpful to have this built into the Firebase portal where, if I have access to the project, it can tell me the project it is registered to. Often, we will have dev/prod Firebase projects and provide the config during build time; this would help us debug the issue if they got mixed up.

Describe alternatives you've considered

It's possible to write a version of this on our own using a script that loads credentials and tests tokens against each project I have access to, but is not very friendly to get the necessary credential files for the script.

Additional context
I was forwarded here from the android SDK repo https://github.com/firebase/firebase-android-sdk/issues/5545

Dominant language
TypeScript
Stars
1.7k
Forks
419
Avg merge
4d 20h
Merged PRs (30d)
16

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from firebase/firebase-admin-node

All issues in firebase/firebase-admin-node

Similar issues

More TypeScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.