authorization and authentication mechanism in GCP
问题 I want to create a Udemy like video platform where a user can see all videos but can watch videos only that he has purchased. I am making a rest call to get the videos from the storage bucket from an angular application, using Firebase authentication here. In my GET request to storage bucket I am passing the access token that I got from Firebase authn . Does this access token can be used to determine scope of the user to access video in a bucket? Assume if I have given read access for a video