Nov 26, 2020
Re time parameter restriction, the Firebase ID Token has an expiration period of 1 hour so afer that, the user will need to re-authenticate to gain access. This is specified here https://firebase.google.com/docs/auth/admin/manage-sessions.