How to acces firebase data using a key

Question

I want to secure my firestore data. I have an app that accesses the data from firestore. Currently, my rules allow anyone to read and write. How can I access the data using a key I have in the app? Sort of verify a key before anyone can read or write data.

Here are my current rules:

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    match /{document=**} {
      allow read, write: if true;
    }
  }
}

https://gyazo.com/da26189ac1c5bbdea8d374ad8870bd7f - this is why I am asking

Yeah, it's because of these lines match /{document=**} { allow read, write: if true; } — Mises
– Mises, Commented Oct 22, 2022 at 12:41

Frank van Puffelen · Accepted Answer · 2022-10-22 12:20:38Z

2

The security rules of your Firestore database only have access to:

The path that is being accessed (read or written).
The data that is being written.
The token of the user that is accessing the data.
Other data in the database.

There is no way to pass custom data to the security rules in another way, so anything you need will have to be in one of these.

So if you want to pass custom data in both read and write operations, you'll have to do so in either the path or make it part of the user's token, for example by setting a custom claim in there.

Also see:

edited Oct 22, 2022 at 12:20

answered Oct 22, 2022 at 12:15

Frank van Puffelen

603k85 gold badges895 silver badges869 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Andrei Over a year ago

so would it be safe to leave it as it is?

Andrei Over a year ago

gyazo.com/da26189ac1c5bbdea8d374ad8870bd7f - this is why i am concerned

Frank van Puffelen Over a year ago

Since you asked "How to acces firebase data using a key", I answered that question That screenshot is a warning that your database rules allow way too broad access. We've covered that warning quite a few times before, so I recommend having a look at some of these top search results: stackoverflow.com/…

Collectives™ on Stack Overflow

How to acces firebase data using a key

1 Answer 1

3 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related