Firebase has a flexible authentication system coupled with security rules: https://www.firebase.com/docs/security-quickstart.html. You can generate your own JWTs (if you have a server or a custom auth backend) or use Simple Login, a service that lets you authenticate against Facebook, Twitter, Github and Persona without requiring you to run any server code. You just authenticate as you would normally in a regular Firebase app, AngularFire will simply inherit the authenticated session.