Is using your production firebase object when using firebase emulators an acceptable practice? [closed]

Question

Closed. This question is opinion-based. It is not currently accepting answers.

Want to improve this question? Because this question may lead to opinionated discussion, debate, and answers, it has been closed. You may edit the question if you feel you can improve it so that it requires answers that include facts and citations or a detailed explanation of the proposed solution. If edited, the question will be reviewed and might be reopened.

Closed 11 months ago.

Improve this question

I have initialised my firebase app as follows.

const PRODUCTION = false;

let firebaseConfig = {
  apiKey,
  ...
};

// Initialize Firebase
// Check if any Firebase apps exist
const apps = getApps();
// Initialize only if no apps exist
const app = !apps.length ? initializeApp(firebaseConfig) : apps[0];


export const auth = getAuth(app);
const firestore = getFirestore(app);

if(!PRODUCTION){
    connectAuthEmulator(auth, "http://localhost:9099");
    connectFirestoreEmulator(firestore, "localhost", 8080);
}

This works great, but I then get a warning saying don't use production credentials when using emulators. I think that is what I am doing though.

What is the correct way to initialise firebase with emulators?

Unsure what the best practice is in this situation.

samthecodingman · Accepted Answer · 2025-01-01 23:06:13Z

The warning you are getting is issued by the Firebase Authentication Emulator when it is initialised.

Traffic to and from the Authentication emulator is not encrypted.

This means that if you have registered a user to your live application, such as an admin user, you should not use that same username and password when interacting with the emulator.

This is what it means by "do not use production credentials" - do not use credentials that are used by accounts of your actual application.

I tend to insert +emulator into the email address of addresses I use with the emulator to make it clear that the account does not match a production one. e.g. Instead of [email protected], I would use [email protected] with a different password. Most modern email services support sub addressing like this which means you can still receive any emails sent to those accounts.

swawge · Accepted Answer · 2025-01-01 23:14:05Z

-1

We should avoid using production cred. When using firebase emulators, there is no need of production specific configuration.

answered Jan 1 at 23:14

swawge

1815 bronze badges

Collectives™ on Stack Overflow

Is using your production firebase object when using firebase emulators an acceptable practice? [closed]

2 Answers 2

Comments

Comments

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Related