Should I hide firebase api keys into backend? Not due to data security but project cloning issue
问题 Can someone help me with firebase security questions? Here's what I was try to figure out: I understand that to let a client side interacting with my firebase app, a config and firebase.initializeApp(config) will be exposed to public, and everyone using the client side can see it in browser developer console. I also know that this is fine because I can use security rules and auth to secure data. But, if someone copied all my client code (including configs) and build a lot of cloned sites,