230419/my_closet
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

firestoreRules! regras de notificacoes

Browse Source
This commit is contained in:
Vitor Moreira
2026-05-04 22:37:58 +01:00
parent 54a7ce0e8e
commit 0fb957a65e
2 changed files with 38 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
firestore.rules Normal file
View File

@@ -0,0 +1,25 @@
rules_version = '2';
service cloud.firestore {
match /databases/{database}/documents {
// ── Dados privados por utilizador ──────────────────────────────────────
match /artifacts/{appId}/users/{userId}/{document=**} {
allow read, write: if request.auth != null && request.auth.uid == userId;
}
// ── Looks partilhados (qualquer utilizador autenticado pode ler/criar) ─
match /artifacts/{appId}/sharedLooks/{lookId} {
allow read: if request.auth != null;
allow create: if request.auth != null;
}
// ── Caixa de entrada de notificações cross-user ────────────────────────
// Qualquer utilizador autenticado pode criar notificações (para outro user)
// Só o destinatário pode ler e atualizar (marcar como lida) as suas
match /artifacts/{appId}/inboxNotifications/{notifId} {
allow create: if request.auth != null;
allow read, update: if request.auth != null
&& request.auth.uid == resource.data.recipientUid;
}
}
}

24
src/App.jsx
View File

@@ -16,7 +16,7 @@ import {
} from 'firebase/auth';
import {
collection, doc, onSnapshot, addDoc, updateDoc,
deleteDoc, writeBatch, setDoc, getDoc
deleteDoc, writeBatch, setDoc, getDoc, query, where
} from 'firebase/firestore';
import { auth, db, appId } from './lib/firebase';
@@ -282,11 +282,12 @@ export default function App() {
else setUserProfile({});
}, (err) => console.error(err));
// Notificações
const notifCol = collection(db, 'artifacts', appId, 'users', user.uid, 'notifications');
const unsubNotif = onSnapshot(notifCol, (snap) => {
// Notificações (coleção pública partilhada, filtrada por recipientUid)
const notifCol = collection(db, 'artifacts', appId, 'inboxNotifications');
const notifQuery = query(notifCol, where('recipientUid', '==', user.uid));
const unsubNotif = onSnapshot(notifQuery, (snap) => {
setNotifications(snap.docs.map(d => ({ id: d.id, ...d.data() })).sort((a, b) => b.createdAt - a.createdAt));
}, (err) => console.error(err));
}, (err) => console.error('Notif listener error:', err));
return () => { unsubClothes(); unsubLooks(); unsubSections(); unsubProfile(); unsubNotif(); };
}, [user]);
@@ -635,19 +636,20 @@ export default function App() {
updatedAt: new Date().getTime(),
});
// Notify the owner
// Notify the owner via coleção pública (inboxNotifications)
if (sharedLookData.ownerUid && sharedLookData.ownerUid !== user.uid) {
try {
const notificationsCol = collection(db, 'artifacts', appId, 'users', sharedLookData.ownerUid, 'notifications');
await addDoc(notificationsCol, {
const inboxCol = collection(db, 'artifacts', appId, 'inboxNotifications');
await addDoc(inboxCol, {
type: 'look_copied',
recipientUid: sharedLookData.ownerUid,
lookName: sharedLookData.lookName,
copiedByEmail: userProfile?.username || user.email || 'Alguém',
createdAt: new Date().getTime(),
read: false
});
} catch (notifErr) {
console.warn('Não foi possível enviar notificação ao dono do look:', notifErr);
console.error('Não foi possível enviar notificação ao dono do look:', notifErr);
}
}
@@ -1812,7 +1814,7 @@ export default function App() {
onClick={async () => {
const batch = writeBatch(db);
notifications.filter(n => !n.read).forEach(n => {
const ref = doc(db, 'artifacts', appId, 'users', user.uid, 'notifications', n.id);
const ref = doc(db, 'artifacts', appId, 'inboxNotifications', n.id);
batch.update(ref, { read: true });
});
await batch.commit();
@@ -1871,7 +1873,7 @@ export default function App() {
{!notif.read && (
<button
onClick={async () => {
const docRef = doc(db, 'artifacts', appId, 'users', user.uid, 'notifications', notif.id);
const docRef = doc(db, 'artifacts', appId, 'inboxNotifications', notif.id);
await updateDoc(docRef, { read: true });
}}
className="shrink-0 p-2 text-primary-600 hover:bg-primary-100 dark:hover:bg-primary-900/40 rounded-xl transition-all"