Password reset web Apı key bug

[BeginnerProgrammer]

Hello, when I send the password reset link to the user, my project’s web API key is written from the password reset link, can’t the users steal the databases in my database?

@yusufcihan @Anil_M @The_K_Studio

[yusufcihan]

@BeginnerProgrammer

Hello, when I send the password reset link to the user, my project’s web API key is written from the password reset link, can’t the users steal the databases in my database?

Even without the password reset link, the API key is already including in the packaged application. You can protect your database using Firebase Security Rules.

[BeginnerProgrammer]

How can I protect it? is there something that explains it?

[BeginnerProgrammer]

Also, can I remove the api in the password reset link? is there a way from the link?

[yusufcihan]

@BeginnerProgrammer

How can I protect it? is there something that explains it?

Firebase Rules VS App Rules

Hello community I have got a doubt. I want to try to understand if it is enough with the rules I established within Kodular, or if it is needed to establish them as well in “Rules in firebase”? For example, I’ve established through the blocks which project buckets can be seen/modified by the users I want to - Do I need to establish that in firebase rules? Is there any risk if I don’t do it? Thank you very much!

@BeginnerProgrammer

Also, can I remove the api in the password reset link? is there a way from the link?

I don’t use Firebase, so I don’t know, sorry.

[BeginnerProgrammer]

thank you for your help have a nice day