Using the replace function in firestore security rules

问题

I'm struggling with Firestore security rules. I want to check on a value that needs the replace function, i.e. an e-mail address. I can find some documentation in the general security docs, but that does not seem to work with Firestore.

For example this works:

allow write: if resource.data.members.data[(request.auth.token.email)] in ["admin"];

but this doesn't (and I changed the key in the members object accordingly):

allow write: if resource.data.members.data[(request.auth.token.email.replace('.' , ',')] in ["admin"];

Another option would be to have a way to use dots in the address of a query, so they don't have to be replaced like this:

var emailSanitized = email.replace('.' , '.');
db.collection('someCollection').where('members.' + emailSanitized, '==', 'admin')

Any ideas here?

回答1:

A little late, but you can simulate the replace function on a string with this one :

function replace(string, replace, by) {
  return string.split(replace).join(by);
}

So you need to define this function in your firestore.rules file and then you can call replace(request.auth.token.email, '.' , ',') to get the same result as request.auth.token.email.replace('.' , ',') in javascript.