Good stuff. Real gem there in tip #8 about using cloud functions for security and to transform "simple" client documents that describe a desired action
Is Cloud Firestore a good selection for a bank account? Can it be safe and reliable to save people's money which is a number to the Cloud Firestore? My concern is reliability and security. Any suggestions?
Great presentation , covers a lot in 25 minutes. BTW: Code at 12:02 may let through the case when user updates status but also would then allow updates to other properties on the document (That we probably don't want to happen) ? I think it should also be checking other properties of the document are not being changed?
You're right, it's just simplified not to confuse with loads of information on screen. In real life scenario you would compare incoming data via request.resource.data with one existing in firestore using resource.data and reject any unwanted modification attempt.
Is it safe to assume that my client code is safe if authentication is required to access Firebase Database? If a user makes changes to my app the signature will also change and this will make it impossible for the user to log-in into my app using firebase am i right?
