Question 119373 in Firebase Question posted in
An extensive official documentation can be found here.

Firebase – Secure way to update Firestore "balance" field

In my app each user has a "balance" entry in Firestore that handles their in-app credits.

How can I update in a secure way their balances when they interact with the app?

At the moment I update the balance client-side, with Firestore.collectio().document().update({...}) but I’m not sure if that is enough safe, even if I have Firestore rules and AppCheck enabled.

Tags:

2

Answers


  1. 0

    To avoid problems, the ideal is that you make this update using a transaction.

    Remembering that it is good to avoid numbers with floating point, in case these credits are money.

    Login or Signup to reply.
  2. 0

    If you want to allow only certain updates to the balance, you can usually enforce those in your security rules.

    If you’ve tried that and can’t get it to work, we can help better if you show what you tried.

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search