Ollie
Ollie

Reputation: 664

Different firebase security rules for different apps

I have a firebase project with 2 apps.

1) A android mobile app using firebase authentication. 2) A web app with no authentication functionality.

I want to allow my web app to read and write to any document in firestore, while still enforcing security rules for the users of the mobile app.

Is this possible with firebase security rules or do I need to build authentication functionality for my web app?

Upvotes: 0

Views: 252

Answers (1)

Doug Stevenson
Doug Stevenson

Reputation: 317760

Firebase security rules can't distinguish between apps within a project. Also, there is no way to distinguish between client platforms.

You should be thinking about ways to authenticate your web app (using Firebase Authentication) so that the authenticated user can read and write only what you allow for that user.

Upvotes: 1

Related Questions