如何从Firebase数据库获取特定数据？登录功能后续实现疑问

Hey there! Let's break down how to fetch just the username and password from Firebase Realtime Database to finish your login function. First, I’ll assume you’ve already set up Firebase in your Android project and have a user data structure similar to this (tweak it if yours is different):

users
  |- userId1
      |- username: "john_doe"
      |- password: "hashed_password_here"  // Important: Never store plain text passwords!
      |- email: "john@example.com"
      |- age: 28

Here's how to modify your login method to fetch the specific data: #

Step 1: Add a Firebase Database Reference

First, declare a reference to your user data node at the top of your activity/fragment:

DatabaseReference usersRef = FirebaseDatabase.getInstance().getReference("users");

Step 2: Update Your loginToSystem Method

We’ll use a Firebase query to filter users by the input username, then fetch only the username and password fields from the matching user. Since Firebase operations are asynchronous, we’ll handle the result inside the onDataChange callback:

public void loginToSystem(String usernameLogin, String passwordLogin){
    usernameLogin = username.getText().toString();
    passwordLogin = password.getText().toString();

    if(TextUtils.isEmpty(usernameLogin)){
        username.setError("Please Input Username");
        return;
    } else if(TextUtils.isEmpty(passwordLogin)){
        password.setError("Please Input Password");
        return;
    }

    // Query Firebase to find the user with the matching username
    usersRef.orderByChild("username").equalTo(usernameLogin)
        .addListenerForSingleValueEvent(new ValueEventListener() {
            @Override
            public void onDataChange(@NonNull DataSnapshot dataSnapshot) {
                if(dataSnapshot.exists()){
                    // Loop through matching users (should be one if usernames are unique)
                    for(DataSnapshot userSnapshot : dataSnapshot.getChildren()){
                        // Fetch only the username and password fields from the database
                        String dbUsername = userSnapshot.child("username").getValue(String.class);
                        String dbPassword = userSnapshot.child("password").getValue(String.class);

                        // Compare input password with stored password
                        // **Critical**: Always hash passwords before storing! Compare hashes, not plain text
                        if(passwordLogin.equals(dbPassword)){
                            // Login successful - navigate to your main screen
                            Toast.makeText(getApplicationContext(), "Login Success!", Toast.LENGTH_SHORT).show();
                            // Add your navigation logic here (e.g., startActivity(new Intent(...)))
                        } else {
                            // Incorrect password
                            password.setError("Incorrect Password");
                        }
                    }
                } else {
                    // No user found with the entered username
                    username.setError("Username does not exist");
                }
            }

            @Override
            public void onCancelled(@NonNull DatabaseError databaseError) {
                // Handle any database errors
                Toast.makeText(getApplicationContext(), "Database Error: " + databaseError.getMessage(), Toast.LENGTH_SHORT).show();
            }
        });
}

Key Best Practices to Follow: #

• Password Security: Storing plain text passwords is a massive security risk. Use a hashing library like BCrypt or Argon2 to hash passwords before saving them to Firebase. When logging in, hash the input password and compare it to the stored hash.
• Unique Usernames: Enforce unique usernames in your database (use Firebase Security Rules to prevent duplicates).
• Asynchronous Logic: All code that depends on the fetched data must live inside the onDataChange method—Firebase won’t block the main thread while fetching data.
• Security Rules: Adjust your Firebase Rules to restrict access appropriately. For example, allow read access for login but limit write access to authenticated users only:

{
  "rules": {
    "users": {
      ".read": true, // Restrict to "auth != null" if you want only logged-in users to read
      ".write": "auth != null"
    }
  }
}

内容的提问来源于stack exchange，提问作者Kopi Bryant