---
title: "Login with Firebase credentials"
method: POST
path: "/auth/firebase-login"
tags: ["Auth"]
---

# Login with Firebase credentials

`POST /auth/firebase-login`

## Request

- Base URL: `http://dev.theverge.com:3002/api`
- URL: `http://dev.theverge.com:3002/api/auth/firebase-login`
- Auth: none declared

Authenticates a user with a Firebase ID token and creates a session. Supports web requests (with CSRF validation) and mobile app requests. For new users, triggers verification email if email is not verified. Web requests for recently created accounts require a silent reCAPTCHA v3 token.

## Request body

- unknown

## Response `200`

Login successful

## Other responses

- `400`: Bad request - invalid reCAPTCHA for recently created web accounts
- `401`: Unauthorized - invalid token or CSRF mismatch
- `500`: Internal server error - user not found

---

[API](https://skmtc.dev/theverge/apis/the-verge-api-documentation.md) - [All operations](https://skmtc.dev/theverge/apis/the-verge-api-documentation/llms.txt) - [OpenAPI document](https://skmtc.dev/theverge/apis/the-verge-api-documentation/revisions/f44a9b8ebfc3?raw)