Storage Security Rules

Similar to Firestore, Cloud Storage uses security rules to manage access to your files.

1. Basic Structure

rules_version = '2';
service firebase.storage {
  match /b/{bucket}/o {
    match /<path>/{allPaths=**} {
      allow read, write: if <condition>;
    }
  }
}

2. Common Scenarios

Public Read (e.g., Public Assets)

allow read: if true;

Authenticated Users Only

allow read, write: if request.auth != null;

Limit File Size & Type

Check request.resource to validate incoming files.

match /images/{imageId} {
  allow write: if request.resource.size < 5 * 1024 * 1024 // 5MB
               && request.resource.contentType.matches('image/.*');
}