问题
I'm thinking about trying Firebase and have spent the day looking at example projects and the docs and I seem to be misunderstanding something, probably because I'm used to server/client-side architectures where the "interesting" parts of the code would be server-side:
According to the examples basically all the code would be using the Firebase commands in the client-side JavaScript. But wouldn't that expose almost 100% of my codebase/logic to the public?
How do I secure my code in Firebase if all of it is visible to the client?
回答1:
You reading this
Firebase Security
Or try watch video this
key to Firebase security Google I/O 2016
And Article
Firebase Security & Rules
Quick Tip Firebase Realtime Database security rules
来源:https://stackoverflow.com/questions/45909313/understanding-securing-firebase-code