check_revoked.py

from firebase_admin import auth
import flask

app = flask.Flask(__name__)

@app.route('/api')
def backend_operation():
    id_token = flask.request.headers['X-Firebase-ID-Token']
    try:
        # Check if the ID token is valid. Additionally, check if it was issued
        # before the user's refresh tokens were revoked.
        auth.verify_id_token(id_token, check_revoked=True)
    except auth.AuthError as error:
        return flask.jsonify({'error': str(error)}), 401
    return _do_operation(flask.requst)