Firestore Rules and Protecting Pages for Authenticated Users

In this lesson we utilize the requiresAuth route meta to keep guests from visiting pages that they shouldn't. We also put some Firestore Rules into place so that users and guests can't alter data that should be off limits.

It's important to remember with Vue.js 3 single page applications (SPAs) that while route guards are handy, they all occur on the client side and you must ensure that you also take steps on the server side to secure your application's data.

Links

• Structuring Cloud Firestore Security Rules
• Writing Conditions for Cloud Firestore Security Rules