Skip to main content
The authentication configuration section is used to manage authentication information and access data for external services, interfaces or systems. In the future this section will allow you to integrate various authentication providers (e.g. Google, Apple, Microsoft or custom OAuth services). Each authentication unit is configured as its own entry with individual parameters. Currently the configuration for Google OAuth 2.0 is available; it manages the credentials of a Google service account for Firebase Cloud Messaging (FCM) through the entry
authentication.googleOAuthKey.FCMKey.

​
authentication* - Basic structure

The basic structure of the authentication node is shown below: 
{
    "authentication": {
      "googleOAuthKey": {...}
    }
}

​
Parameter overview

ParameterDescription
googleOAuthKeyAuthentication for Firebase Cloud Messaging

​
authentication.googleOAuthKey.FCMKey - Authentication for Firebase Cloud Messaging

For the shop system to be able to send push notifications, for example via the app or the browser, it needs to authenticate against Firebase. The authentication.googleOAuthKey.FCMKey configuration section contains the credentials of the Google service account used for authenticating against Firebase Cloud Messaging (FCM). This data enables the system to send push notifications via the Google infrastructure or to carry out other FCM-related actions automatically. Each entry provides the complete authentication information of the service account, including project ID, client email, private key and the associated OAuth endpoints.

​
Example configuration

{
  "authProviderX509CertUrl": "https://www.googleapis.com/oauth2/v1/certs",
  "authUri": "https://accounts.google.com/o/oauth2/auth",
  "clientEmail": "<CLIENTEMAIL>",
  "clientId": "<CLIENTID>",
  "clientX509CertUrl": "https://www.googleapis.com/robot/v1/metadata/x509/<CLIENTEMAIL>",
  "name": "FCM Service Account",
  "privateKey": "<PRIVATEKEY>",
  "privateKeyId": "<PRIVATEKEYID>",
  "projectId": "<PROJECTID>",
  "tokenUri": "https://oauth2.googleapis.com/token",
  "type": "service_account",
  "universeDomain": "googleapis.com"
}

​
Parameter overview

ParameterTypeDescription
authProviderX509CertUrlstringURL through which the public certificates of the authentication are made available.
authUristringStandard URL for OAuth token handling at Google.
clientEmailstringEmail address of the service account.
clientIdstringInternal ID of the service account.
clientX509CertUrlstringURL through which the public certificates of the authentication are made available.
namestringDisplay name of the service account in the system.
privateKeystringPrivate key of the service account (used to sign tokens).
privateKeyIdstringKey ID of the service account (used to sign tokens).
projectIdstringID of the associated Firebase / Google Cloud project.
tokenUristringStandard URL for OAuth token handling at Google.
typestringType of the authentication object — always service_account here.
universeDomainstringGoogle-specific namespace (default: googleapis.com).