Add private bucket

backend/firebase/firebase.json

@@ -5,7 +5,7 @@
       "rules": "storage.rules"
     },
     {
-      "bucket": "compass-130ba-private.firebasestorage.app",
+      "bucket": "compass-130ba-private",
       "rules": "private-storage.rules"
     }
   ]

backend/firebase/private-storage.rules

@@ -7,4 +7,4 @@ service firebase.storage {
       allow write: if request.auth.uid == userId && request.resource.size <= 20 * 1024 * 1024; // 20MB
     }
   }
-}
+}

backend/firebase/storage.rules

@@ -4,8 +4,7 @@ service firebase.storage {
   match /b/{bucket}/o {
     match /{allPaths=**} {
       allow read;
-      // Don't require auth, as dream uploads can be done by anyone
-      allow write: if request.resource.size <= 10 * 1024 * 1024; // 10MB
+      allow write: if request.auth != null && request.resource.size <= 10 * 1024 * 1024;
     }
   }
 }

common/src/envs/dev.ts

@@ -13,7 +13,7 @@ export const DEV_CONFIG: EnvConfig = {
     authDomain: "compass-57c3c.firebaseapp.com",
     projectId: "compass-57c3c",
     storageBucket: "compass-57c3c.firebasestorage.app",
-    privateBucket: 'compass-private.firebasestorage.app',
+    privateBucket: 'compass-130ba-private',
     messagingSenderId: "297460199314",
     appId: "1:297460199314:web:c45678c54285910e255b4b",
     measurementId: "G-N6LZ64EMJ2",

common/src/envs/prod.ts

@@ -44,7 +44,7 @@ export const PROD_CONFIG: EnvConfig = {
     authDomain: "compass-130ba.firebaseapp.com",
     projectId: "compass-130ba",
     storageBucket: "compass-130ba.firebasestorage.app",
-    privateBucket: 'compass-private.firebasestorage.app',
+    privateBucket: 'compass-130ba-private',
     messagingSenderId: "253367029065",
     appId: "1:253367029065:web:b338785af99d4145095e98",
     measurementId: "G-2LSQYJQE6P",

firebase.json

@@ -5,7 +5,7 @@
       "rules": "storage.rules"
     },
     {
-      "bucket": "compass-130ba-private.firebasestorage.app",
+      "bucket": "compass-130ba-private",
       "rules": "private-storage.rules"
     }
   ]