News for hackers. Stuff that matters.
Re:Firebase gets better analytics, crash reporting and more by anshum4n on Tuesday November 08, 2016 @01:20AM (#12898107)
Exact same thing that we are using for a realtime collaborative app. Generate token on server-side with access to certain keys.

However, we had to redo our json structure once we started thinking authorisation. It sucked and in retrospect should have thought about it earlier, but it seems to work.

Typically authorisation layers on top of existing data, but in this case, we had to redo data structure keeping auth in mind. Is that why you feel its brittle?

Re:Firebase gets better analytics, crash reporting and more by girvo on Tuesday November 08, 2016 @06:04PM (#12904742)
> Typically authorisation layers on top of existing data, but in this case, we had to redo data structure keeping auth in mind. Is that why you feel its brittle?

That's pretty much exactly it, I guess. It honestly just feels less "secure" than I'd like, even if it's not!