Next.js / Firebase Admin Developer – Fix GCP Workload Identity Scope for Firestore

We have a Next.js (App Router) application running on Vercel using Firebase Admin SDK with Workload Identity Federation (WIF) / OIDC (no JSON service account keys). Current Setup: Firebase Auth is fully functional with WIF. The Google Cloud Service Account already has Owner / Cloud Datastore User permissions. The Bug: Firestore queries inside API routes throw a 500: Missing or insufficient permissions gRPC error. What You Will Do: Fix src/lib/firebase-admin-init.ts so the google-auth-library federated credential explicitly requests the [https://www.googleapis.com/auth/cloud-platform](https://www.googleapis.com/auth/cloud-platform) scope required by Firestore. Ensure both adminAuth and adminDb (Firestore) share this correctly scoped credential context inside initializeApp(). Verify that src/app/api/business-listing/route.ts successfully reads/writes to Firestore without errors. Required Experience: Strong hands-on experience with Next.js App Router (Serverless / Node.js). Direct experience with Firebase Admin SDK and Google Cloud IAM / Workload Identity Federation. Understanding of OAuth 2.0 scopes and gRPC authentication mechanics. Type: Short-term / One-time task (1–2 hours max) Budget: Fixed Price ($50–$100) or Hourly ($40–$75/hr)