连接时更新 firebase 中的用户配置文件

Question

Below is the Firebase sample code, where I can update a user after being authenticated. (var user = firebase.auth (). currentUser;)

  var user = firebase.auth().currentUser;

user.updateProfile({
  displayName: "Jane Q. User",
  photoURL: "https://example.com/jane-q-user/profile.jpg"
}).then(function() {
  // Update successful.
}).catch(function(error) {
  // An error happened.
});

I would like to know if it is possible to edit the user without having to be logged in, use the updateProfile function with the user's UID or EMAIL.

Thanks

Answer 1

除非用户已登录，否则用户无法成功调用updateProfile 。其他任何事情都将是一个巨大的安全漏洞，因为这意味着互联网上的任何人都可以仅通过 UID 的知识来更新任何配置文件。