8.6.2 breaks auth/firestore rules

[mazlano27]

[REQUIRED] Describe your environment

• Operating System version: Mac OS X
• Browser version: Chrome
• Firebase SDK version: 8.6.2
• Firebase Product: auth

[REQUIRED] Describe the problem

After upgrading from firebase 8.6.1 → 8.6.2, I get the "ERROR FirebaseError: Missing or insufficient permissions." error when trying to access protected docs/collections. Rolling back to 8.6.1 fixes the issue.

Steps to reproduce:

Upgrade from Firebase 8.6.1 → 8.6.2
My app is running on Angular 12

[xylo04]

I can reproduce, I had to roll back k0swe/forester#395. Same symptom, ERROR FirebaseError: Missing or insufficient permissions appears in the JS console when trying to access documents. Rolling back fixes.

[looptheloop88]

Hi @mazlano27, I wasn't able to reproduce the error using the SDK version 8.6.2. Would you mind sharing a minimal, but complete sample project or code snippet that I can run locally to replicate the issue? Also, please include a sample Firestore security rules.

[glued]

I'm seeing this as well

[jsakas]

From 8.6.1 to 8.6.2 I see:

TypeError: t.onInit is not a function

I believe its related to auth as well.

[xylo04]

Hi @mazlano27, I wasn't able to reproduce the error using the SDK version 8.6.2. Would you mind sharing a minimal, but complete sample project or code snippet that I can run locally to replicate the issue? Also, please include a sample Firestore security rules.

I'm attempting to create a reproducible, minimal sample on Stackblitz, to no avail so far. Others, please feel free to fork it and see if we can isolate the issue.

[xylo04]

In the meantime, I have a reasonably simple reproduction with my real app:

1. Clone https://github.com/k0swe/forester
2. npm install
3. ng serve -o
4. Log in with a Google account
5. Create an empty logbook (any name)
6. You are taken to the logbook view. There should be no console errors about Firebase. (Might be some about websockets that I need to clean up)

Now to reproduce the undesired behavior:

1. npm install firebase@8.6.2 --save-exact
2. ng serve -o
3. Back on the Forester main page, click on your logbook
4. On the logbook view, the console now has ERROR FirebaseError: Missing or insufficient permissions.

Now that I think of it, the security rules for this Firestore are such that the logbook collection is accessed by an array of editor IDs. Maybe the Firestore client is short-circuiting the security check when it can't tell if reading the logbook will succeed?

[lenanex]

I have the same issue on my side. I've downgraded to 8.6.1 and it solves the issue.

[Hibrix-net]

I couldn't write to Firestore. I've been fighting for hours thinking it was my fault.
I desperately found this thread. What a relief!

[steinv]

I have the same issue in my project. Hopefully there's a fix coming quickly. For now I pinned on an older version of firebase.

[strom2357]

Thanks for the repro app! I'll bring this up with the team, tracking internally at b/189114894