Using Firebase Authentication but need to improve security

manpreet Best Answer 2 years ago

I am a final year student and currently have an application that uses Firebase in order to process login requests. I have a sign-up activity and a login activity. Currently, I have one account registered on Firebase and use it with my testing. I have came to the part of my report that asks about the security aspects I have considered and the app that I have developed when accessed it will show all the data no matter who is logged in.

Is there any way that I can improve this or how secure is Firebase Authentication?

manpreet 2 years ago

The Firebase authentication will enable you to let users login using either password, Google sign, Facebook, yahoo, Microsoft, etc..

All the details regarding a user are stored securely in the Firebase servers. In your case, you need to determine if the user is logged so he can see any data and you shouldn't show any data to the user unless he is authenticated.

The other solution is to use firebase database and create different parent nodes, example a node called teachers that will contain list of teachers, then you can add the teacher's name as an attribute under a class node and you will be able to retrieve all the classes that the teacher is teaching.

Thus, only retrieving data related to that specific user.