firebase-meetup-#11-2019-02-18

Transcript

1. 1.

   'JSFTUPSF
   SVMFTͷӡ༻ͱ
   -PDBM
   &NVMBUPSΛ࢖ͬͨςετ Tomokazu Kozuma 2019 / 02 / 18 /

   MON Firebase Meetup #11
2. 2.

   A B O U T M Y S E L

   F ࣗݾ঺հ Tomokazu Kozuma @Tomokazu106 ౦ژ޻ۀେֶେֶӃଔۀޙɺαΠόʔΤʔδΣϯτͰεϚϗήʔϜͷαʔόɺΠϯ ϑϥશൠΛ୲౰ɻԾ૝௨՟ʹ͍ٕͭͯज़ϒϩάΛॻ͍ͯΔ͏ͪʹ຅಄͠ɺຊ৬ͱ ͯ͠஫ྗ͢ΔͨΊʹ(JODPʹೖࣾɻ(JODPͰ͸ϒϩοΫνΣʔϯͷϊʔυӡ༻ɺϋʔ υϑΥʔΫରԠɺόοΫΤϯυͳͲ޿ൣғΛ୲౰ɻ
3. 3.

   Company Profile

4. 4.

   ·ͱΊͯͻͱͭʹ BITCOIN Blockchain BITCOIN CASH Blockchain LITECOIN Blockchain XRP(Ripple) Blockchain

   ETHEREUM CLASSIC Blockchain ETHEREUM Blockchain
5. 5.

   ෳ਺ͷԾ૝௨՟Λ·ͱΊͯ؅ཧ

6. 6.

   T I T L E T E X T શମߏ੒

7. 7.

   ֓ཁ • 'JSFTUPSFͰى͍ͬͯ͜ΔηΩϡϦςΟ໰୊
   • (JODPͷSVMFTӡ༻ͷมભ
   • -PDBM
   &NVMBUPSΛ࢖ͬͨςετ A G E

   N D A
8. 8.

   'JSFTUPSFͰى͍ͬͯ͜Δ໰୊ P A R T 1

9. 9.

   S e c u r i t y P r

   o b l e m ԯ݅ͷػີ৘ใ͕ެ։͞Ε͍ͯΔ • 'JSFCBTF
   %BUBCBTFΛ࢖͍ͬͯΔ಺ͷ͕࿙Ӯ
   • ݪҼ͸SVMFTΛ͖ͪΜͱઃఆͰ͖͍ͯͳ͍ h t t p s : / / w w w . a p p t h o r i t y . c o m / c o m p a n y / p r e s s / p r e s s - r e l e a s e s / 6 2 - o f - e n t e r p r i s e s - e x p o s e d - t o - s e n s i t i v e - d a t a - l o s s - v i a - f i r e b a s e - v u l n e r a b i l i t y
10. 10.

    'JSFTUPSFͷηΩϡϦςΟجૅ • ΫϥΠΞϯτ͔Β௚઀'JSFTUPSFΞΫηεͰ͖Δ
    • ΞΫηεʹ͸"1*Ωʔ͕ඞཁ
    • "1*Ωʔ͸ΫϥΠΞϯτʹຒΊࠐΉͷͰ୭Ͱ΋ΈΕΔ
    • ୭Ͱ΋ΞΫηεͰ͖Δ͔ΒSVMFTͰ੍ޚ A

    b o u t F i r e s t o r e
11. 11.

    'JSFTUPSF
    SVMFT • SFBE
    
    XSJUF
    ݖݶ
    • σʔλͷόϦσʔγϣϯ T I T L E

    T E X T Firestore Cloud 3VMFT "1*ΩʔͰΞΫηε
12. 12.

    • SFBE
    ୯ҰEPDΛऔಘ͢ΔHFUͱෳ਺औಘ͢ΔMJTU
    • XSJUF
    DSFBUF
    VQEBUF
    EFMFUF
    SFBE
    
    XSJUF
    ݖݶ R e a

    d R e s t r i c t i o n match /Users/{uid} { allow get: if someCondition(); allow create: if someCondition(); } function someCondition() { … }
13. 13.

    • ϦΫΤετσʔλɿSFRVFTUSFTPVSDFEBUB
    
    • 'JSFTUPSFσʔλɿSFTPVSDFEBUB
    • ܕɿJOU
    TUSJOH
    CPPM
    UJNFTUBNQ
    ͳͲ
    •

    LFZɿIBT"MM
    IBT0OMZ
    IBT"OZ σʔλͷόϦσʔγϣϯ D a t a V a l i d a t i o n match /Users/{uid} { allow update: if request.resource.data.keys().hasAll(["name", "age"]) && request.resource.data.name is string && request.resource.data.name != "" && request.resource.data.age == resource.data.age }
14. 14.

    5 S e t t i n g s e

    c u r e r u l e s ػີσʔλ͸ผ֊૚ผSVMFTʹ͢Δ ϫΠϧυΧʔυͰͷSVMFTઃఆʹؾΛ͚ͭΔ ৘ใ࿙Ӯ͠ͳ͍ͨΊͷSVMFTઃఆ
15. 15.

    • ผ֊૚ʹͯ͠SVMFTઃఆΛݫ͘͢͠Δ ػີσʔλ͸ผ֊૚ D i v i d e S

    e c r e t D a t a match /Users/{uid} { // ೝূࡁϢʔβʹެ։ allow read: if isAuthUser(); // ࣗ෼ͷσʔλ͚ͩʹΞΫηεՄ match /Private/Info { allow read: if isMyData(uid); } } function isMyData(uid) { return request.auth.uid == uid; }
16. 16.

    ϫΠϧυΧʔυͰͷSVMFTઃఆ • ϫΠϧυΧʔυͰෳ਺SVMF͕ద༻͞ΕͯڐՄ͞ΕΔ U s i n g w i

    l d c a r d match /Users/{uid} { // ৚݅1 match /{allChildren=**} { allow read: if isAuthUser(); } // ৚݅2 match /Private/Info { allow read: if isMyData(uid); } } function isMyData(uid) { return request.auth.uid == uid; }
17. 17.

    (JODPͷSVMFTӡ༻ͷมભ P A R T 2

18. 18.

    ϦϦʔεॳظ • ϦϦʔε౰ॳ͸SVMFTͷςετ͕ͳ͔ͬͨ
    • σϓϩΠ͔ͯ͠Βಈ࡞νΣοΫͳͷͰ͕͔͔࣌ؒΔ
    • ։ൃ؀ڥʹӨڹΛ༩͑ͯ͠·͏ E a r

    l y S t a g e
19. 19.

    ϦϦʔεதظ • SVMFT͕ߦΛ௒͑͸͡Ίͯมߋ͕ࠔ೉ʹͳ͖ͬͯͨ
    • SVMFTΛมߋͰ͖ΔΑ͏ʹςετίʔυΛ࣮૷
    • ςετ͢Δʹ͸ςετ༻ͷ'JSFCBTF
    1SPKFDU͕ඞཁ
    M i d

    d l e S t a g e
20. 20.

    ςετ1SPKFDUΛ࢖ͬͨςετ

21. 21.

    SVMFTͷςετํ๏ • 'JSFCBTF
    4%,ʹ͸$MJFOU
    4%,ͱ"ENJO
    4%,͕͋Δ
    • $MJFOU
    4%,͚ͩSVMFT͕ద༻͞ΕΔ
    • +BWB4DSJQU͚ͩͭͷ4%,͕͋Δ H o w

    t o t e s t Firestore Cloud $MJFOU
    4%, "ENJO
    4%, 3VMFT
22. 22.

    • UFTUͷͨΊͷ'JSFCBTFϓϩδΣΫτΛ࡞੒
    • 'JSFCBTF
    "VUIFOUJDBUJPOͰಗ໊ೝূΛ༗ޮԽ
    • ωοτϫʔΫӽ͠ͳͷͰ͕͔͔࣌ؒΔ
    • SVMFTͱςετσʔλͷڝ߹ ςετ1SPKFDUΛ࢖ͬͨํ๏ T

    e s t u s i n g p r o j e c t Firestore Cloud
23. 23.

    ݱࡏ • ೥݄ʹ'JSFTUPSF
    -PDBM
    &NVMBUPSൃද
    • SVMFTͷςετ͸ϩʔΧϧ؀ڥ͚ͩͰ׬݁
    • ଞਓͷ࡞ۀΛҙࣝ͠ͳͯ͘ྑ͘ͳͬͨͷͰSVMFTͷ௥Ճɺ मਖ਼͕͠΍͘͢ͳͬͨ P r

    e s e n t S t a g e
24. 24.

    -PDBM
    &NVMBUPSΛ࢖ͬͨςετ P A R T 3

25. 25.

    'JSFCBTF
    -PDBM
    &NVMBUPS • ςετʹ͸!pSFCBTFUFTUJOHϞδϡʔϧΛ࢖༻
    • ೝূະೝূΞΧ΢ϯτɺ"ENJOΞΧ΢ϯτΛ؆୯ʹར ༻Ͱ͖Δ
    • ςετσʔλͷڝ߹͠ͳ͍͠ɺUSVODBUF͠ͳ͍͍ͯ͘
    • ςετ࣮ߦ͕࣌ؒʹ࡟ݮ

    L o c a l E m u l a t o r
26. 26.

    L o a d r u l e s SVMFTͷϩʔυ

    import * as firebase from ‘@firebase/testing’ // rulesͷϩʔυ firebase.loadFirestoreRules({ projectId: 'test-project-00', rules: fs.readFileSync("firestore.rules", "utf8") }) • SVMFTͷϩʔυ͸೚ҙͷQSPKFDU*EͰͰ͖Δ
    • QSPKFDU*EผʹݸผͷσʔλۭؒΛ࣋ͯΔ
    • ςετຖʹQSPKFDU*EΛมߋ͢Ε͹·ͬ͞Βͳঢ়ଶ
27. 27.

    • ෳ਺ͷೝূΞΧ΢ϯτΛಉ࣌ʹѻ͑Δ L o a d r u l e

    s ΞΧ΢ϯτ࡞੒ // ೝূࡁΞΧ΢ϯτ const firestore = firebase .initializeTestApp({ projectId: ‘test-project-00', auth: {uid: ‘test-account’} }) .firestore(); // AdminΞΧ΢ϯτ const adminFirestore = firebase .initializeAdminApp({ projectId: 'test-project-00', auth: ‘admin-account’ }) .firestore();
28. 28.

    ·ͱΊ • SVMFTͷઃఆͰجຊతʹ৘ใ࿙Ӯ͸๷͛Δ
    • ػີ৘ใ͸֊૚Λ෼͚ͯϫΠϧυΧʔυΛଟ༻͠ͳ͍
    • SVMFTͷςετ͸-PDBM
    &NVMBUPSͰޮ཰Խ S u m

    m a r y