Firebase storage file is accessed by everyone

Question

I have restricted rules:

rules_version = '2';
service firebase.storage {
 match /b/{bucket}/o {
   match /{allPaths=**} {
    allow read, write: if false;
    }
  }
}

but every one can access and download file from this link.

how should I restrict downloading from this link?

question from:https://stackoverflow.com/questions/65920356/firebase-storage-file-is-accessed-by-everyone

Answer 1

Download URLs by definition give read-only access to the file, and are not affected by the security rules.

If you want to control access to the file, you should not generate a download URL and instead access the file through the SDK only.