From 5d6534c282ae2bf65148b54c99319266548ca8a2 Mon Sep 17 00:00:00 2001
From: Matthew Grove <me@mgrove.uk>
Date: Sun, 8 Aug 2021 22:13:17 +0100
Subject: [PATCH] Add Storage security rules

---
 storage.rules | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 storage.rules

diff --git a/storage.rules b/storage.rules
new file mode 100644
index 0000000..0533f5d
--- /dev/null
+++ b/storage.rules
@@ -0,0 +1,13 @@
+rules_version = '2';
+
+service firebase.storage {
+  match /b/{bucket}/o {
+    match /{userId}/{vocabId} {
+      allow read: if request.auth != null;
+      allow create, update: if request.auth.uid == userId &&
+        request.resource.contentType.matches("audio/mp3") &&
+        request.resource.size < 1024 * 1024 / 5 &&
+        vocabId.matches('[a-zA-Z0-9_-]+\\.mp3');
+    }
+  }
+}