Firebase 规则验证和捕获验证在 android 应用程序中失败

Question

设计

• 可以登录应用程序的用户
• 登录用户可以创建客户，这些客户将存储在node 下，其值将是当前登录的用户ID

当前数据库值

{
  "customers" : {
    "UserId1" : {
      "custId1" : {
        "customerCode" : "thk",
        "customerLimit" : "58866",
        "customerName" : "Test New "
      },
      "custId2" : {
        "customerCode" : "thh",
        "customerLimit" : "5698",
        "customerName" : "Yeth"
      }
    },
    "UserId2" : {
      "custId3" : {
        "customerCode" : "thh",
        "customerLimit" : "5886",
        "customerName" : "Test "
      },
      "custId4" : {
        "customerCode" : "tbh",
        "customerLimit" : "58669",
        "customerName" : "New Test"
      }
    }
  }
}

以下是当前为firebase 中的customers 表定义的规则。

{
  "rules": {
    "customers":{
      ".read": "auth != null", 
      ".write": "auth != null", 
      "$CID":{
            "customerName":{
                ".validate": "newData.isString() && newData.val().length < 100"
            },
            "customerCode":{
                ".validate": "newData.isString() && newData.val().length<4 && !newData.exists()"
            },
            "customerLimit":{}
      }
    }   
  }
}

尽管我已经为customerCode 定义了一条规则，即它的值应该小于 4 个字符，但它允许插入 5 个字符。另外，如何添加一个验证来验证每个 customerCode 的唯一性 userId？截至目前，它有!newData.exists()，但它也不起作用。

谁能指导我正确的方向？

Answer 1

我认为您最多可以插入 5 个字符，因为您的 .length 和您的 newData.val().lenght 从 0 开始，例如 array。换句话说，如果您想为每个 userId 链接 customerCode 的唯一性，您应该在您的 firebase 数据库中创建一个新表，例如：

{
  "customers": {
    "UserId1": {
      "custId1": {
        "customerCode": "customerId1",
        "customerLimit": "58866",
        "customerName": "Test New "
      },
      "custId2": {
        "customerCode": "customerId2",
        "customerLimit": "5698",
        "customerName": "Yeth"
      }
    },
    "UserId2": {
      "custId3": {
        "customerCode": "customerId3",
        "customerLimit": "5886",
        "customerName": "Test "
      },
      "custId4": {
        "customerCode": "customerId4",
        "customerLimit": "58669",
        "customerName": "New Test"
      }
    }
  }
  "customerCode": {
    "custId1": {
      "customerId1": "thh"
    }
    "custId2": {
      "customerId2": "thk"
    }
    "custId3": {
      "customerId3": "thh"
    }
    "custId4": {
      "customerId4": "tbh"
    }
  }
}

使用此模型，您可以将规则修改为如下所示：

{
  "rules": {
    "customers": {
      ".read": "auth != null",
      ".write": "auth != null",
      "$CID": {
        "customerName": {
          ".validate": "newData.isString() && newData.val().length < 100"
        },
        "customerCode": {
          //Code shouls be string, less than 4 characters and it can't be already stored on customerCode table for the current userId
          ".validate": "newData.isString() && newData.val().length<3  && !root.child('customerCode').child(auth.uid).exists()"
        },
        "customerLimit": {}
      }
    }
    "customerCode": {
      "$CID": {
        "CustomerCodeId": {
          ".read": "auth != null",
          ".write": "auth != null",
        }
      }
    }
  }

也许上一个示例中的规则并不完美，但我相信您可以通过查看 firechat database rules 找到如何将其融入您的应用程序的方法。通过查看该存储库，我学到了很多东西。