firebase / firebase/snippets-node

Add a warning about including `mintAdminToken`

Open
#289 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
395
Forks
139
PR merge metrics
No merged PRs in 30d

Description

Thanks for these amazing snippets but I feel like there should be a warning about including this in any production environment since the combination of `mintAdminToken` and `recursiveDelete` would enable to anyone blasting an entire production database.

I suggest you create an example that isn't copy-pasteable.

https://github.com/firebase/snippets-node/blob/ea3747eee572d3e1bebd1cdafda9fa34a6dc38f0/firestore/solution-deletes/functions/index.js#L19

Contributor guide

Open the contributing guide

Research direction

Start with firestore/solution-deletes/functions/index.js at the linked example around line 19, and inspect how mintAdminToken and recursiveDelete are presented. Make the production risk explicit and ensure the example is not directly copy-pasteable; confirm the resulting snippet still communicates the deletion workflow safely.

Written by the indexing model from the issue text.

Assessment

Tech stack
firebase, javascript, node.js
Domain
documentation, security
Issue type
Documentation
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
52/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.