Firebase: Authenticate an existing user using REST API and Firebases hidden Auth URL
<p>For the past 3 years we have used HTML/Js only with Firebase but now we are using Unity as well. </p>

<p>The current Unity/Firebase only works on Android/iOS when deployed and 99% of our work is on the windows store.</p>

<p>I've actually got a pretty decent Unity/Firebase codebase going but it requires me to use a full App Secret.</p>

<p>All the other libraries expose a method to login with Email/Password but the REST API only allows the use of a token or your app secret that it then states is ill advised to put into your client; I guess the thinking is if you're using a different library that you'll have your own auth/user method which we don't...</p>

<p>Now, I've pulled apart the web version and got this:</p>

<pre><code>https://auth.firebase.com/v2/&lt;myfirebase&gt;/auth/password?&amp;email=dennis%40&lt;mysite&gt;&amp;password=&lt;mypassword&gt;v=js-2.2.9&amp;transport=json&amp;suppress_status_codes=true
</code></pre>

<p>So there IS an endpoint that I can send stuff to and I've tested it inside unity with good results. </p>

<p>Obviously the URL isn't guaranteed to stay working but I'm wondering if there is any reason NOT to use this?</p>

<p>Also, Why not just expose this endpoint in the official REST API?</p>