I just finished setting up a small web interface showing data contained in a Firebase
database of mine. It displays the data I want and also allows me to go and do some changes if needed.
One issue is still left there though. It is possible for any user to check the page source and have access to information like:
.....
var config = {
apiKey: ".........",
authDomain: "..........firebaseapp.com",
databaseURL: "..........firebaseio.com",
projectId: ".........",
storageBucket: "..........appspot.com",
messagingSenderId: "........."
};
firebase.initializeApp(config);
.....
I don't think this is what I want. So the question is: what is the best way to hide this kind of information from public eyes?
Or there may be just no need to hide it?
According to some post I read that may actually be the case.
I just want to comfirm that things haven't changed with recent versions of Firebase
.
Thanks is advance for any relevant tip.
As a reference:
Here are some post talking about this subject:
- Is it safe to expose Firebase apiKey to the public?
https://groups.google.com/forum/#!topic/firebase-talk/-u2wBWSETds
This other post seems to have a different vue though: