How do I correctly authenticate with firebase for each request

I'm playing around with firestore since I used realtime database in a course I did on angular. I created an angular app, and trying to get some documents based on a document property. However, I get this error each time:

ERROR FirebaseError: Missing or insufficient permissions.

Which is probably because i am doing something wrong and I don't understand enough about these type of requests. I finished up on maximilian's Angular course where working with realtime DB went like a breeze, but firestore is definitely proving to be more difficult.

Here is my code:

getTimesharesByOwnerId(): Observable<Timeshare[]> {
return this.currentUser$.pipe(
switchMap((user) => {
if (user) {
const ownerId = user.email;
const timesharesCollection = collection(this.afs, 'timeshares');
const q = query(
timesharesCollection,
where('ownerId', '==', ownerId)
);
return collectionData(q, { idField: 'id' }) as Observable<
Timeshare[]
>;
} else {
return of([]);
}
})
);
}


When the above request is done, the request does not include headers.

Now, I think:
a) I should add headers to my request with the currentUser$.token
b) I should find a way for firebase to check that header

But how should I do B to shield of certain actions? Because for some reason gemini and firebase always assumes I am using some kind of SDK for this? I'm using angular firestore, yes, but my header is never automatically attached. I store my logged in user in my Authservice as an observable.

The solution is probably very very easy, but I am currently feeling lost, as if I've wasted my time on this angular course because I'm too stupid to understand anything :/ I should probably use the SDK then? but am I not already? And does that mean I wasted an enormous amount of time setting up my auth service when firebase could've done this for me?

Continue reading...