gcp-firestore-user-credential-password-output

Firestore with MongoDB compatibility returns the plaintext server-generated user password only after credential creation or password reset.

gcpcritical service: gcp:firestore emits ExposesCredential

Where it sits

locationfirestore.projects.databases.userCreds.create/firestore.projects.databases.userCreds.resetPassword.securePassword
location kindoutput_value
data kindspassword database_credential credential
emits edgeExposesCredential
serviceFirestore / Datastore (gcp:firestore)

Collection recipe

access modecreation_response_only
operationfirestore.projects.databases.userCreds.create/firestore.projects.databases.userCreds.resetPassword
response pathsecurePassword
encodingstring
params{"name": "\u003cresource-name\u003e"}

Required permissions

datastore.userCreds.create
datastore.userCreds.update

References

move · open · esc close