How to allow only my app to access firebase without a login?

Question

I am storing my app's data on Firebase and this being my first project on Firebase is proving to be much more difficult than I thought. I have gone through the official documentation and it says that we can login a user with their email and password or use other login options like Google or Facebook etc. However I don't want user's to login to my application but only read and write data to firebase if they are using my app. Right now I am using public rules for my firebase but then anyone with a reference to my firebase URL can read and write to the database. How do I overcome this?

Thanks in advance.

What about using anonymous authentication? https://firebase.google.com/docs/auth/android/anonymous-auth — finki, Jul 15 '16 at 11:39
You have already introduced a major threat by making rules Public. Best way to overcome this is to implement Authentication. Period. — Chintan Soni, Jul 15 '16 at 11:42
@finki what is difference between anonymous authentication and public. — avinesh, Feb 02 '17 at 17:56

score 12 · Answer 1 · answered Jul 15 '17 at 21:52

12

Enable Anonymous sing-in provider under Sing-in Method under Authentication tab in your Firebase Console and use firebase anonymous authentication

answered Jul 15 '17 at 21:52

Morad

2,641
19
28

i am facing an issue using firebase anonymous authentication. Can you help me with that? – Shafqat Kamal Mar 03 '20 at 10:04

score 1 · Answer 2 · answered Jul 15 '16 at 11:47

1

Firebase Real-Time DB does not allow access to Un-Authorized Users.

Making the Firebase Database Rules true for Read & Write is not the way as (Chintan Soni) said.

So a Authentication mechanism is the best way!

answered Jul 15 '16 at 11:47

Veeresh Charantimath

4,541
4
25
35

Does firebase alows an app to publish with read ,write access without login(authentication) – Zar E Ahmer May 23 '17 at 14:26
2

you can use anonymous login – Veeresh Charantimath May 24 '17 at 06:19
A firebase database can be public. All depends of auth rules. – atrujillofalcon Apr 30 '18 at 20:47
I implemented auth into my android app also i have set rules in firebase to protect my firebase project from other app users. But still its not working. – Shafqat Kamal Mar 03 '20 at 10:07

score -6 · Answer 3 · answered Jul 15 '16 at 11:49

If you only want to use firebase database you should:

Download SDK from gradle https://firebase.google.com/docs/android/setup
In firebase console create project and add your app, download json i put it on your Android Studio Project
Add database dependiences 'com.google.firebase:firebase-database:9.2.1'
Configure rules in console. You could also disable rules (recomended only for first tests: "rules": { ".read": true, ".write": true }

I also recomended update Android Studio to version 2.1 or 2.2 with Firebase integration included.

even if user doesn't have any application key? – Shohrab May 22 '17 at 19:33 — Shohrab, May 22 '17 at 19:33

score -8 · Answer 4 · answered Mar 14 '18 at 17:47

-8

Set Database rules up as follows:

    {
  "rules": {
    ".read": true,
    ".write": true
  }
}

answered Mar 14 '18 at 17:47

Face Value

51
1
9

2

This approach is for testing purposes only. It's a big security violation if used in production; anyone can read/write your database. – Odin Aug 03 '18 at 15:20
2

This should not be used in production. – Haroun Hajem Mar 26 '19 at 16:53

How to allow only my app to access firebase without a login?

4 Answers4

Linked