Require a secure upload-download extension for firebase storage and Db components

Marketplace Request
#1

The firebase storage and database components are GREAT for uploading/downloading activities. They, however, have a major shortcoming in that they work only if the firebase security is open to all . that is
"Allow read; Allow write; (for storage)
OR
“.read”: “auth = null”, (for realtime Db)
“.write”: “auth = null”
This leaves our Db wide-open to hackers and is not fit for production strength applications.

It would be great if some one can create an extension that would require an optional currentUseridToken (taken from firebaseAuth) to connect securely to firebase realtime Db and storage.
An example is given below of the present firebase storage call and how it could be modified.
firestorerequest

This is something worth paying for. Any takers?

#2

are u requesting for a extension

1 Like
#3

As you are Requesting for extension, I have changed the Category to #marketplace

3 Likes
#4

Have you tried these rules?
{ "rules": { "some_path": { "$uid": { // Allow only authenticated content owners access to their data ".read": "request.auth != null && request.auth.uid == $uid" ".write": "request.auth != null && request.auth.uid == $uid" } } } }

#5

  1. There is an extension…(PAID)
    http://community.appybuilder.com/t/firebaseaddon-extension-to-be-sponsored/2127
    This works with mirxtremapps firebase extensions.

  2. No extensions needed if you use the REST api and a Web component
    Firebase with a Web Component

1 Like
#6

Sumit1332: Reply to: If it exists, then the link, if not could someone make one?
Maayur: Reply to: Please see above.
Golumatha100: Reply to: Hi, the rules at the firebase cloud end are not the issue, it is the need for ease of upload /download of data from an App designed in Kodular. Presently for a secure upload to the firebase realtime Db, you need to jump through a number of hoops using a very unreliable web component (issues with failed/incomplete/errored uploads). And for Firebase storage, this format will (probably ) not work.

Kodularuploadviaweb
Kodularuploadviaweb775×394 67.2 KB

Have no choice but to use this format because the native component (firebase_db) does not have components for a secure upload.
Therefore the need for a secure firebase upload/download component/extension
Thank to all of you for your replies.

#7

Thanks Tim, for the heads-up wrt the paid extension. Have found him on Kodular and have PMed him