How to use a Firebase app without google_services.json?
I have the following issue. I have created a project using Firebase as my backend and someone is asking me for this project. I've sent him the project but without the google_services.json file. From know reasons, Android Studio is complaining that is unable to run the project because:
google_services.json file is missing
Is it save to send the google_services.json as well? If I'll send the file, will he be able to see all my databases? Or how can my friend use the app that I've sent to him?
android
firebase firebase-realtime-database google-cloud-firestore asked Nov 12 '18 at 17:13
Ioana P.
361419
add a comment |
I have the following issue. I have created a project using Firebase as my backend and someone is asking me for this project. I've sent him the project but without the google_services.json file. From know reasons, Android Studio is complaining that is unable to run the project because:
google_services.json file is missing
Is it save to send the google_services.json as well? If I'll send the file, will he be able to see all my databases? Or how can my friend use the app that I've sent to him?
android
firebase firebase-realtime-database google-cloud-firestore asked Nov 12 '18 at 17:13
Ioana P.
361419
I don't think it's a bad thing to send your google_services.json.. since anybody could decompile your apk anytime. The main security you should do is the rules in firebase
– Christophe Gudlake
Nov 12 '18 at 17:20
You think or are you sure? There is no authentication in that app. There are only some reads.
– Ioana P.
Nov 12 '18 at 17:34
1
ok then just fix your firebase rules... but hey.. how do you manage your rules if there is no Auth ? read true, write false ?
– Christophe Gudlake
Nov 12 '18 at 17:38
I don't. That's why I said that there is no auth, it is just a simple app that reads some data.
– Ioana P.
Nov 12 '18 at 17:39
add a comment |
I have the following issue. I have created a project using Firebase as my backend and someone is asking me for this project. I've sent him the project but without the google_services.json file. From know reasons, Android Studio is complaining that is unable to run the project because:
google_services.json file is missing
Is it save to send the google_services.json as well? If I'll send the file, will he be able to see all my databases? Or how can my friend use the app that I've sent to him?
android
firebase firebase-realtime-database google-cloud-firestore asked Nov 12 '18 at 17:13
Ioana P.
361419
I have the following issue. I have created a project using Firebase as my backend and someone is asking me for this project. I've sent him the project but without the google_services.json file. From know reasons, Android Studio is complaining that is unable to run the project because:
google_services.json file is missing
Is it save to send the google_services.json as well? If I'll send the file, will he be able to see all my databases? Or how can my friend use the app that I've sent to him?
android
firebase firebase-realtime-database google-cloud-firestore android
firebase firebase-realtime-database google-cloud-firestore asked Nov 12 '18 at 17:13
Ioana P.
361419
asked Nov 12 '18 at 17:13
Ioana P.
361419
asked Nov 12 '18 at 17:13
Ioana P.
361419
asked Nov 12 '18 at 17:13
Ioana P.
361419
asked Nov 12 '18 at 17:13
Ioana P.
361419
361419
I don't think it's a bad thing to send your google_services.json.. since anybody could decompile your apk anytime. The main security you should do is the rules in firebase
– Christophe Gudlake
Nov 12 '18 at 17:20
You think or are you sure? There is no authentication in that app. There are only some reads.
– Ioana P.
Nov 12 '18 at 17:34
1
ok then just fix your firebase rules... but hey.. how do you manage your rules if there is no Auth ? read true, write false ?
– Christophe Gudlake
Nov 12 '18 at 17:38
I don't. That's why I said that there is no auth, it is just a simple app that reads some data.
– Ioana P.
Nov 12 '18 at 17:39
add a comment |
I don't think it's a bad thing to send your google_services.json.. since anybody could decompile your apk anytime. The main security you should do is the rules in firebase
– Christophe Gudlake
Nov 12 '18 at 17:20
You think or are you sure? There is no authentication in that app. There are only some reads.
– Ioana P.
Nov 12 '18 at 17:34
1
ok then just fix your firebase rules... but hey.. how do you manage your rules if there is no Auth ? read true, write false ?
– Christophe Gudlake
Nov 12 '18 at 17:38
I don't. That's why I said that there is no auth, it is just a simple app that reads some data.
– Ioana P.
Nov 12 '18 at 17:39
I don't think it's a bad thing to send your google_services.json.. since anybody could decompile your apk anytime. The main security you should do is the rules in firebase
– Christophe Gudlake
Nov 12 '18 at 17:20
I don't think it's a bad thing to send your google_services.json.. since anybody could decompile your apk anytime. The main security you should do is the rules in firebase
– Christophe Gudlake
Nov 12 '18 at 17:20
You think or are you sure? There is no authentication in that app. There are only some reads.
– Ioana P.
Nov 12 '18 at 17:34
You think or are you sure? There is no authentication in that app. There are only some reads.
– Ioana P.
Nov 12 '18 at 17:34
1
1
ok then just fix your firebase rules... but hey.. how do you manage your rules if there is no Auth ? read true, write false ?
– Christophe Gudlake
Nov 12 '18 at 17:38
ok then just fix your firebase rules... but hey.. how do you manage your rules if there is no Auth ? read true, write false ?
– Christophe Gudlake
Nov 12 '18 at 17:38
I don't. That's why I said that there is no auth, it is just a simple app that reads some data.
– Ioana P.
Nov 12 '18 at 17:39
I don't. That's why I said that there is no auth, it is just a simple app that reads some data.
– Ioana P.
Nov 12 '18 at 17:39
add a comment |
2 Answers
2
active
oldest
votes
Is it save to send the
google_services.jsonas well?
The google_services.json contains the configuration data that your app needs to find its Firebase project on the servers. Is does not automatically allow access to the project though.
If I'll send the [
google_services.json] file, will he be able to see all my databases?
That depends on the security rules of your databases. If you've set them to be publicly readable, then your friend will be able to read/write to them. But so will everyone else who happens to discover the URL/ID of your project.
To prevent that you'll want to set specific access rules for your databases. To get started on these, I highly recommend reading the documentation on security rules for Realtime Database and Cloud Firestore. There's also a great video from the Firebase Summit last month: Five tips to secure your app.
answered Nov 12 '18 at 17:52
Frank van Puffelen
228k28372397
Yes, this what I need to do, I'll start with the documentation on security rules. Thank you for the helpful answer and useful resources.
– Ioana P.
Nov 12 '18 at 18:06
add a comment |
Since you don't use any authentication, setup your rules as follow:
"rules":
".read": true,
".write": false
There is no danger to give your google_services.json since it's attach to this database only. If you really want security, add the authentication and setup your rules.
Take note, now you won't be able to write data to your database except from the server side (firebase-admin in cloud functions). So you may create some cloud functions that will write the data you send via an http request for example.
answered Nov 12 '18 at 17:47
Christophe Gudlake
604526
Thanks for you answer.
– Ioana P.
Nov 12 '18 at 18:07
add a comment |
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53267004%2fhow-to-use-a-firebase-app-without-google-services-json%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
Is it save to send the
google_services.jsonas well?
The google_services.json contains the configuration data that your app needs to find its Firebase project on the servers. Is does not automatically allow access to the project though.
If I'll send the [
google_services.json] file, will he be able to see all my databases?
That depends on the security rules of your databases. If you've set them to be publicly readable, then your friend will be able to read/write to them. But so will everyone else who happens to discover the URL/ID of your project.
To prevent that you'll want to set specific access rules for your databases. To get started on these, I highly recommend reading the documentation on security rules for Realtime Database and Cloud Firestore. There's also a great video from the Firebase Summit last month: Five tips to secure your app.
answered Nov 12 '18 at 17:52
Frank van Puffelen
228k28372397
Yes, this what I need to do, I'll start with the documentation on security rules. Thank you for the helpful answer and useful resources.
– Ioana P.
Nov 12 '18 at 18:06
add a comment |
Is it save to send the
google_services.jsonas well?
The google_services.json contains the configuration data that your app needs to find its Firebase project on the servers. Is does not automatically allow access to the project though.
If I'll send the [
google_services.json] file, will he be able to see all my databases?
That depends on the security rules of your databases. If you've set them to be publicly readable, then your friend will be able to read/write to them. But so will everyone else who happens to discover the URL/ID of your project.
To prevent that you'll want to set specific access rules for your databases. To get started on these, I highly recommend reading the documentation on security rules for Realtime Database and Cloud Firestore. There's also a great video from the Firebase Summit last month: Five tips to secure your app.
answered Nov 12 '18 at 17:52
Frank van Puffelen
228k28372397
Yes, this what I need to do, I'll start with the documentation on security rules. Thank you for the helpful answer and useful resources.
– Ioana P.
Nov 12 '18 at 18:06
add a comment |
Is it save to send the
google_services.jsonas well?
The google_services.json contains the configuration data that your app needs to find its Firebase project on the servers. Is does not automatically allow access to the project though.
If I'll send the [
google_services.json] file, will he be able to see all my databases?
That depends on the security rules of your databases. If you've set them to be publicly readable, then your friend will be able to read/write to them. But so will everyone else who happens to discover the URL/ID of your project.
To prevent that you'll want to set specific access rules for your databases. To get started on these, I highly recommend reading the documentation on security rules for Realtime Database and Cloud Firestore. There's also a great video from the Firebase Summit last month: Five tips to secure your app.
answered Nov 12 '18 at 17:52
Frank van Puffelen
228k28372397
Is it save to send the
google_services.jsonas well?
The google_services.json contains the configuration data that your app needs to find its Firebase project on the servers. Is does not automatically allow access to the project though.
If I'll send the [
google_services.json] file, will he be able to see all my databases?
That depends on the security rules of your databases. If you've set them to be publicly readable, then your friend will be able to read/write to them. But so will everyone else who happens to discover the URL/ID of your project.
To prevent that you'll want to set specific access rules for your databases. To get started on these, I highly recommend reading the documentation on security rules for Realtime Database and Cloud Firestore. There's also a great video from the Firebase Summit last month: Five tips to secure your app.
answered Nov 12 '18 at 17:52
Frank van Puffelen
228k28372397
answered Nov 12 '18 at 17:52
Frank van Puffelen
228k28372397
answered Nov 12 '18 at 17:52
Frank van Puffelen
228k28372397
answered Nov 12 '18 at 17:52
Frank van Puffelen
228k28372397
228k28372397
Yes, this what I need to do, I'll start with the documentation on security rules. Thank you for the helpful answer and useful resources.
– Ioana P.
Nov 12 '18 at 18:06
add a comment |
Yes, this what I need to do, I'll start with the documentation on security rules. Thank you for the helpful answer and useful resources.
– Ioana P.
Nov 12 '18 at 18:06
Yes, this what I need to do, I'll start with the documentation on security rules. Thank you for the helpful answer and useful resources.
– Ioana P.
Nov 12 '18 at 18:06
Yes, this what I need to do, I'll start with the documentation on security rules. Thank you for the helpful answer and useful resources.
– Ioana P.
Nov 12 '18 at 18:06
add a comment |
Since you don't use any authentication, setup your rules as follow:
"rules":
".read": true,
".write": false
There is no danger to give your google_services.json since it's attach to this database only. If you really want security, add the authentication and setup your rules.
Take note, now you won't be able to write data to your database except from the server side (firebase-admin in cloud functions). So you may create some cloud functions that will write the data you send via an http request for example.
answered Nov 12 '18 at 17:47
Christophe Gudlake
604526
Thanks for you answer.
– Ioana P.
Nov 12 '18 at 18:07
add a comment |
Since you don't use any authentication, setup your rules as follow:
"rules":
".read": true,
".write": false
There is no danger to give your google_services.json since it's attach to this database only. If you really want security, add the authentication and setup your rules.
Take note, now you won't be able to write data to your database except from the server side (firebase-admin in cloud functions). So you may create some cloud functions that will write the data you send via an http request for example.
answered Nov 12 '18 at 17:47
Christophe Gudlake
604526
Thanks for you answer.
– Ioana P.
Nov 12 '18 at 18:07
add a comment |
Since you don't use any authentication, setup your rules as follow:
"rules":
".read": true,
".write": false
There is no danger to give your google_services.json since it's attach to this database only. If you really want security, add the authentication and setup your rules.
Take note, now you won't be able to write data to your database except from the server side (firebase-admin in cloud functions). So you may create some cloud functions that will write the data you send via an http request for example.
answered Nov 12 '18 at 17:47
Christophe Gudlake
604526
Since you don't use any authentication, setup your rules as follow:
"rules":
".read": true,
".write": false
There is no danger to give your google_services.json since it's attach to this database only. If you really want security, add the authentication and setup your rules.
Take note, now you won't be able to write data to your database except from the server side (firebase-admin in cloud functions). So you may create some cloud functions that will write the data you send via an http request for example.
answered Nov 12 '18 at 17:47
Christophe Gudlake
604526
edited Nov 12 '18 at 18:07
answered Nov 12 '18 at 17:47
Christophe Gudlake
604526
answered Nov 12 '18 at 17:47
Christophe Gudlake
604526
answered Nov 12 '18 at 17:47
Christophe Gudlake
604526
604526
Thanks for you answer.
– Ioana P.
Nov 12 '18 at 18:07
add a comment |
Thanks for you answer.
– Ioana P.
Nov 12 '18 at 18:07
Thanks for you answer.
– Ioana P.
Nov 12 '18 at 18:07
Thanks for you answer.
– Ioana P.
Nov 12 '18 at 18:07
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53267004%2fhow-to-use-a-firebase-app-without-google-services-json%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
I don't think it's a bad thing to send your google_services.json.. since anybody could decompile your apk anytime. The main security you should do is the rules in firebase
– Christophe Gudlake
Nov 12 '18 at 17:20
You think or are you sure? There is no authentication in that app. There are only some reads.
– Ioana P.
Nov 12 '18 at 17:34
1
ok then just fix your firebase rules... but hey.. how do you manage your rules if there is no Auth ? read true, write false ?
– Christophe Gudlake
Nov 12 '18 at 17:38
I don't. That's why I said that there is no auth, it is just a simple app that reads some data.
– Ioana P.
Nov 12 '18 at 17:39