Background: I'm building a React Native iOS app which will involve uploading images and being able to access them from within the app (but not publicly).
In my rules for Firebase storage, I have the following:
service firebase.storage {
match /b/{bucket}/o {
match /{allPaths=**} {
allow read, write: if request.auth != null;
}
}
}
As I understand this, only an authorized Firebase user should be able to access the files. However, I've uploaded an image which I can access in any browser:
Is there something wrong with my security rules? Thanks