简体   繁体   English

如何保护 firebase 身份验证

[英]How to secure firebase authentication

I've been building my app via firebase and things are going pretty well.我一直在通过 firebase 构建我的应用程序,一切进展顺利。 Recently I was prompted to add security rules to my real time database.最近我被提示将安全规则添加到我的实时数据库中。 Although I understand what to do, I noticed that there is no rules tab for my authentication section for firebase. Are there any steps I should take to secure my authentication information, besides password management.虽然我知道该怎么做,但我注意到我的 firebase 身份验证部分没有规则选项卡。除了密码管理之外,我是否应该采取任何步骤来保护我的身份验证信息。 Manipulating users' data would be bad but deleting my authentication and thus who all has made an account would be catastrophic.操纵用户的数据会很糟糕,但删除我的身份验证以及所有已创建帐户的人将是灾难性的。

Only the projects members of your Firebase Project, with the corresponding rights, can access the Authentication console of your Project.只有您的 Firebase Project 的 项目成员,具有相应的权限,才能访问您的 Project 的 Authentication 控制台。

An end user of your Firebase Project, ie a user declared in the Authentication service, can only interact with his own account through the Client SDKs, eg modify his password or update other properties of his own profile.您的 Firebase 项目的最终用户,即在身份验证服务中声明的用户,只能通过客户端 SDK 与他自己的帐户进行交互,例如修改他的密码更新他自己的配置文件的其他属性

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM