In this project, you will design and implement a secure Firebase-based backend for an existing iOS AI chatbot app. Your task is to build an MVP backend that uses Firebase Cloud Functions and Firebase Authentication to securely connect the app to the OpenAI API. This project will allow you to:

• Gain practical experience with Firebase services, including Cloud Functions and Authentication.

• Learn how to securely manage API keys and integrate third-party APIs into a mobile app.

• Develop a scalable and secure backend solution that effectively bridges the mobile frontend with external services.

This project is aimed at a motivated, self-directed student who is ready to tackle real-world technical challenges independently. The project is designed for those who are eager to apply their knowledge, solve complex problems, and further develop their expertise in modern backend development.

Please note that our team is still building expertise in Firebase and API integrations. Because of this - this project offers you a unique opportunity to share your knowledge, insights and initiative.

Cloud Functions Development

Task:

Create one or two Firebase Cloud Functions that:

• Receive user input from the iOS app.

• Use a securely stored OpenAI API key to call the OpenAI API.

• Return the API response back to the app.

• Include basic error handling (e.g., return an error message for invalid inputs or API failures).

Success Criteria & Deliverables:

• A working Cloud Function that successfully receives a test input, calls the OpenAI API, and sends back a response.

• The API key is stored securely (e.g., in Firebase environment configuration) and not hard-coded.

• Basic inline comments and a short document (or README) explaining:

• How to deploy and test the function.

• How error handling is implemented.

User Authentication

Task:

Integrate Firebase Authentication so that:

• The Cloud Functions only process requests that include a valid Firebase ID token.

• Requests without valid authentication are rejected.

Success Criteria & Deliverables:

• The Cloud Functions verify Firebase ID tokens before processing a request.

• A simple demonstration (using test tokens or manual test steps) showing that:

• Valid tokens allow the function to execute.

• Missing or invalid tokens result in an appropriate error response.

Brief documentation (a few paragraphs or bullet points) on:

• How the authentication check is implemented.

• How to simulate authenticated and unauthenticated requests during testing.