Using Firestore JS client SDK as an admin client (bypass rules)

Just so we’re clear, this is not a security vulnerability. This blog post goes through an undocumented option in the firebase/firestore JS client SDK that allows to use it as an admin client (skipping firestore.rules ) just like firebase-admin/firestore would do. Spoiler on the next section: this is especially useful for using inside Cloudflare Workers and Tauri apps . In this post: Why not use…