Oracle Backend for Firebase (Fusabase)
A toolkit for building mobile and web apps on Oracle AI Database. Open Source SDKs for iOS, Android, JavaScript, and Flutter, plus a CLI and Console, give your apps Authentication, a Document Database, File Storage, declarative Security Rules, AI Vector Search, and attestation-based App Trust. Runs on the Oracle AI Database and ORDS you operate, anywhere they run. Ships with ORDS 26.1.1.
How it Works
Fusabase is the application layer. You operate and host Oracle AI Database and ORDS yourself, whether they run on OCI, AWS, Azure, GCP, on-prem, or Cloud@Customer. Fusabase ships inside ORDS 26.1.1: server-side packages that live in the database, APIs exposed through ORDS, and SDKs for your clients.
Oracle AI Database
Holds your application data and runs the Fusabase server-side packages. Document collections, relational tables, authentication state, file metadata, and vector embeddings all live in one database, governed by one set of Security Rules.
Oracle Rest Data Services (ORDS)
The service layer. Fusabase APIs, Console workflows, and runtime services are exposed through ORDS. Auth, data access, storage, and App Trust requests all route through it.
SDKs and CLI
The developer surface. SDKs for iOS, Android, JavaScript, and Flutter for app code and REST APIs for everything off-SDK. A CLI for project setup, configuration, and scripted workflows.
The concepts behind the SDKs and Console: Projects and Apps, Collections and Documents, Auth Providers, declarative Security Rules, Storage Paths, and Vector Columns.
Build your own app, RecipeShare, in a workshop that walks through SDK installation, the Console UI, Authentication, Security Rules, Database, File Storage, and more. The same workshop is available for web, iOS, and Android.
Get Started
Key Features
Database
Build with a document-style database experience that feels natural for modern apps. Store data in collections, documents and subcollections, query it from your client code, and even connect existing Oracle relational data when you need to work with existing data.
Authentication
Add sign-in fast with built-in authentication for email/password, social login, and enterprise identity providers. User and session state live in the same Oracle AI Database your app data lives in, so security rules can reference identity directly without a separate user store.
Declarative Security Rules
Control who can read or write data with simple, fine-grained security rules. Protect collections, documents, and files with policies that work alongside authentication to keep access locked down by default.
Storage
Upload, download, list, and reference files from your client code. File paths are governed by the same security rules that protect your collections, so storage access uses one policy model with the rest of your data.
AI vector search
Store dense and sparse embeddings on documents and run similarity queries through the SDK. Vectors live in the same database as the documents they describe, so similarity rank, document filters, and joins against data happen in one query under one set of rules — no second vector database to operate or keep in sync.
App Trust
Attestation-based protection for backend requests. App Trust attaches a provider-issued token to Fusabase API calls, so the backend can reject traffic that doesn't come from a verified app session. Supporting web providers: reCAPTCHA v3, reCAPTCHA Enterprise, hCaptcha, and Cloudflare Turnstile.
Realtime updates
Subscribe to a collection or query with onSnapshot to receive new snapshots when the underlying data changes. Backed by Oracle Continuous Query Notification, so the change feed comes from the database itself rather than a separate event service.
SDKs
Open source SDKs for JavaScript, iOS, Android, and Flutter, plus REST APIs. Collections, documents, auth state, security-rules behavior, and storage references map to patterns Firebase developers will already recognize.
CLI and Console
The CLI handles project setup, configuration, and scripted workflows. The Console handles app registration, user management, App Trust providers, rule editing, data browsing, storage setup, vector columns, authorized domains, and project management.