word-waltz / files / firestore.rules
firestore.rules
| 1 | rules_version = '2'; |
| 2 | service cloud.firestore { |
| 3 | match /databases/{database}/documents { |
| 4 | match /games/{gameId} { |
| 5 | // Confidentiality is enforced by client-side AES-GCM-256 encryption. |
| 6 | // The encryption key lives only in the URL fragment and is never sent |
| 7 | // to the server, so Firestore only ever sees opaque ciphertext. |
| 8 | allow read, write: if true; |
| 9 | } |
| 10 | } |
| 11 | } |