0

Setting: I have connected firebase with my flutter app.

Problem: Even if I have set up the security rules to only allow authenticated requests, the google services info.json file can easily be obtained by extracting the APK file or see it in the Web Version inside the user side HTML.

What would stop an intruder from setting up their own app, register firebase with my credentials and authenticate themselves and making any changes they want to my database?

Question: If that's the case, how can I prevent it / obfuscate the firebase credentials?

pipafria
  • 102
  • 1
  • 2
  • 9

0 Answers0