CODEWITHSUNDEEP
firebase-realtime-databasefirebase-security
Chris Reynolds
Chris Reynolds

Reputation: 1

Firebase Database 'Strong' rules

All,

I have been working on an Android App that uses firebase realtime database, cloud store and authentication. It's never going into production on the google play store - however I am worried that in a few days time, the access to the database will be denied because I don't have 'strong' rules - whatever 'strong' are.

Currently, the rules are set as follows:

  "rules": {
    ".read": "auth.uid != null",
    ".write": "auth.uid != null"
  }
}

The database and all functionality work great - what can i do to add to these rules to satisfy firebase that I now have 'Strong' rules - or at least prevent access from being denied in 30 days - as I need this app to show the functionality of the database etc.

Thanks

Upvotes: 0

Views: 116

Answers (1)

Gastón Saillén
Gastón Saillén

Reputation: 13129

Automatically when you change your Firebase rules it will be propagated throughout all the database, there is no need for users to update your app, what you need to be sure is that the users have any login provider (google,facebook) because these rules are saying that only authenticated users can read and write into the database.

If you post this rules without an authentication provider from Firebase, your users will see a blank screen and they will not be able to read/write, if you have implemented a login system with any provider you would be fine

Upvotes: 1

Related Questions