Where to store the config for firebase?

Question

firebase

Where to store the config for Firebase? In all "articles" it is simply written in the client (main.js/vue cli), but it seems to me from a security point of view, this is a bad practice. It is better to make a separate nodejs server that will process requests and store all configs there and do authorization through firebase. Or maybe I don't understand something?

Answer 1

Everything that is issued from Firebase must either be absolutely public information, or user authentication and authorization must be added to Firebase. I don’t remember exactly how it works there - I haven’t opened it for a long time, but I clearly remember that they implemented it. From live examples - acloud guru did this in conjunction with Auth0. At least before