Firebase Storage share download url a security ris

Question

I have an image saved in my Firebase Storage. I would like to display this image in multiple emails that I send. I have so far used the download URL as obtained from my Firebase console and the image displays successfully. My question is: Is this the correct way of sharing the image? Is it secure? If not, then how should I get a secure link to that image?

Here's where I got the download URL from, in the Firebase console:

Any help on this would be appreciated.

Answer 1

Using a download URL is the appropriate way to share files outside of an application, or to users who don't need to be logged in.

I'm curious what you mean by "is it secure"? If you're sharing the object with someone, they can forward the link to someone else who can download it, but they can also just download the object and share it as well.

If you want to control access based on a particular user, you'll need to have users log in and download the objects in an application, rather than using download URLs. Granted, again, here they can take the downloaded object and share it with anyone else.