Task: Review Firebase security guidelines

[mpjovanovich]

Task

Review:

• https://firebase.google.com/support/guides/launch-checklist
• https://firebase.google.com/docs/projects/api-keys

[mpjovanovich]

Extract firebase config to env variables?

[mpjovanovich]

Per recommendations I've blocked requests except from production app url; now I can't run local server. Getting message: Firebase: Error (auth/requests-from-referer-http://localhost:5173-are-blocked.).

So it's working as expected, but we need to figure out how local development is going to work. Local instance? https://firebase.google.com/docs/emulator-suite

[mpjovanovich]

Removing this API website restriction for now until we have a solution for local development configured:

https://console.cloud.google.com/

[mpjovanovich]

Have gone through the basics and converted local development to emulator. Firestore security rules are in place. Another reading of the guidelines would be a good idea, but it's safe to drop this from high to medium priority so we can work on other issues.