CODEWITHSUNDEEP
javascriptfirebaseauthenticationfirebase-authenticationgoogle-cloud-firestore
yummypasta
yummypasta

Reputation: 1468

Cloud Firestore with Authentication

I have been looking for a way to use Authentication with Firebase's new Cloud Firestore. I know it's possible, but there is no good guide both in the Documentation and other places.

Could someone please explain how to provide an Authentication UID when get()ing data from Cloud Firestore?

Here are my security rules:

service cloud.firestore {
  match /users/{userID} {
    allow read, write: if request.auth.uid == userID;
  }
}

And here is my current code: 

var db = firebase.firestore();
var docRef = db.collection("users").doc(uid); //lets say "uid" var is already defined
docRef.get().then(function(doc) {
  if (doc.exists) {
      console.log("Document data:", doc.data());
  } else {
      console.log("No such document!");
  }
}).catch(function(error) {
  console.log("Error getting document:", error);
});

The structure of my database is just a "users" collection at root, then a document for each user (named after the UID). I want to get the document with the user's UID.

Of course, this gives the error "Missing or insufficient permissions," which is expected, because of the security rules.

This question may seem simple, but if anyone can find some good documentation on this, that would be great!

Upvotes: 4

Views: 15141

Answers (2)

yummypasta
yummypasta

Reputation: 1468

I was just confused about how UIDs work. I was under the impression that you have to supply a UID and an auth token to database operation.

You don't actually pass in a UID to database operations. The firebase object stores authentication state. You can simply sign in (check the Firebase docs to read how to do this), and after the action is completed (use a .then promise statement) you can simply do your operation.

Additionally, to have users not sign in every time they visit your app, you can have the `firebase object's authentication state persistent.

Upvotes: 10

Hareesh
Hareesh

Reputation: 6900

Your rule should be inside match /databases/{database}/documents 

service cloud.firestore {
  match /databases/{database}/documents {
    match /users/{userID} {
        allow read, write: if request.auth.uid == userID;
   }
  }
}

Upvotes: 9

Related Questions