A free, open source, complete, rapid development package for creating Social apps, Chat apps, Community(Forum) apps, Shopping mall apps, and much more based on Firebase.
-
Complete features.
This package has complete features (see Features below) that most of apps require. -
Simple, easy and the right way.
We want it to be deadly simple yet, right way for ourselves and for the developers in the world. We know when it gets complicated, our lives would get even more complicated. -
Real time.
We design it to be real time. All the events like post and comment creation, voting(like, dislike), deletion would appears on all the user's phone immediately after the event. -
I am looking for community devleopers who can join this work. Please email me at [email protected]
-
Please post your issues at https://github.com/thruthesky/fireflutter/projects/1
Table of contents
- Fire Flutter
- TODOs
- Installation
- Sources and packages
- Coding Guideline
- User
- Admin
- User presence
- Chat
- Reminder
- FriendMap
- Inform
- For developer
- Test
- Issues
- Dyanmic Links Service
- Reports
- Forum
- Push notification
- Fil upload - Firebase Storage
- User can list all the reports which must be shown to admin only.
- Since email & phone no are saved in firebase auth service, admin needs a special function to know what is the email and phone no of users.
- put many chat messages in one chat message box(balloon) if they are written in 20 minutes.
- Do not increase view counter on same post. Save data on local storage. It's not a critical feature. It would be okay even if the view counter increases more than once.
- Do the Firebase installation.
- Git fork the fireflutter.
- Do the Firebase installation.
- Edit platform version to
platform :ios, '10.0'
in Podfile.
- Refer the instructions of FlutterFire Overview
- Download ios app's
GoogleService-Info.plist
. And save it under<root>/example/ios/Runnder
, Then open Xcode and drag it under Runner.- Remember to update other settings like
REVERSED_CLIENT_ID
intoInfo.plist
.- When you change the firebase project, you have to update all the related settings again.
- Remember to update other settings like
-
To install Firebase Realtime Database, enable it on Firebase console and put the security rules.
-
Note, if you enable
Firebase Realtime Database
, you have to re-download and update theGoogleService-Info.plist
.- You may need to update the
GoogleService-Info.plist
after enabling other features of the Firebase.
- You may need to update the
-
Add the following security rules on firebase realtime database
{
"rules": {
"presence": {
".read": true,
"$uid": {
".write": true
}
},
"inform": {
"$uid": {
".read": true,
".write": true
}
},
"users": {
"$uid": {
".read": true,
".write": "$uid === auth.uid"
}
},
"user-settings": {
"$uid": {
".read": "$uid === auth.uid",
".write": "$uid === auth.uid"
}
}
}
}
-
Install 'Image Resize' firebase extension with the following settings;
- Upgrade billing plan
- This extension will use cloud function. It will install
generateResizedImage
function. - Cloud functions location: Choose the same location as your project.
- Cloud Storage bucket for images: don't touch(or use it as it is).
- Sizes of resized images: 200x200
- Deletion of original file: No
- Cloud Storage path for resized images: leave it empty.
- Paths that contain images you want to resize: /uploads
- List of absolute paths not included for resized images: leave it empty.
- Cache-Control header for resized images: max-age=86400
- Convert image to preferred types: webp Note, that you can see the configuration in firebase extensions menu and reconfigure it. Note, that you can see the location in firebase cloud functions menu.
-
Copy the following rules and paste it into the storage rules section.
rules_version = '2';
service firebase.storage {
match /b/{bucket}/o {
match /{allPaths=**} {
allow read: if request.auth!=null || resource.contentType.matches('image/.*');
allow create: if willBeMine() && lessThan(10);
allow update: if isMine();
allow delete: if isMine();
}
}
}
function willBeMine() {
return request.auth != null && request.resource.metadata.uid == request.auth.uid;
}
function isMine() {
return request.auth != null && resource.metadata.uid == request.auth.uid;
}
function lessThan(n) {
return request.resource.size < n * 1024 * 1024;
}
-
Enable firestore.
-
Copy the firestore securiy rules and update it on your firebase project.
-
To install the firestore indexes, it is recommended to run the query and click the link of it to generate the indexes.
- To do this, just call
getFirestoreIndexLinks
method and it will print the link on debug console. You just need to click the links.- See example of
getFirestoreIndexLinks
in the example home screen.
- See example of
- See the firestore indexes and if you want to update it manually on your firebase project.
- To do this, just call
-
We use Firestore only for
Chat
andForum
features since they needs more support on query and search functionalities.- All other features should go to realtime database.
- To set a user admin, Add the user's UID as field name(key) with the value of
true
in/settings/admin
.- For instance,
{ "UID_AAA": true, "UID_BBB": true }
, then users whose uid is UID_AAA and UID_BBB are the admins.
- For instance,
-
We only use functions for the work that cannot be done by client end like sending push notifications.
- We don't use cloud functions simply because we want to avoid multiple read and write on documents and to the logic simple in the client end.
-
To install,
cd firebase/functions
npm i
firebase deploy --only functiosn
b5679dd69c9d0fd320c68697ade374cdae31dd84
- Jiffy is used for date and time.
- The file name of all model end with
xxxx.model.dart
- All model have
.data
property (getter) to export its model data to a map which then can be saved into firestore.- Note, that
.data
must contain only the data to be saved in firestore.
- Note, that
- All model should have
.map
property(getter) to export its model data to a map. while.data
only contains for saving firestore,.map
may contain other values.
- Do Firebase installation
- Enable Email/Password Sign-In method to login with email and password.
- Enable Google Sign-In method and add the following in
Info.plist
to login with Google account
<!-- Google Sign-in Section -->
<key>CFBundleURLTypes</key>
<array>
<dict>
<key>CFBundleTypeRole</key>
<string>Editor</string>
<key>CFBundleURLSchemes</key>
<array>
<!-- TODO Replace this value: -->
<!-- Copied from GoogleService-Info.plist key REVERSED_CLIENT_ID -->
<string>com.googleusercontent.apps.------------------------</string>
</array>
</dict>
</array>
<!-- End of the Google Sign-in Section -->
-
User email and phone number are saved in firebase auth. So, use
UserService.instance.email
orUserService.instance.phoneNumber
to get email or phone number. -
Other user properties (like name, photo url, birthday, etc) are saved in
/users
inside realtime database. -
Many apps share user name and photo. For instance, when a user chat to the other user, they shoud know each other's name and photo. Or on post list screen, there should be author name and photo on each post or comment.
- User information would be displayed as extra information on chats, posts, comments, public profiles, and so on. Realtime database costs by GB download that is cheap enough to use it as normalized. But it would cost a lot how you use it.
-
Warning, we do not denormalize user data. That means, user name will not be copied into other documents. Instead, the app will simply read
/users/<uid>
document whenever user data is needed. In this way, data integrity is guranteed. But often, more data will be downloaded and it will cost more money.- So, keep
/users/<uid>
slim. Try to keep only the following fields.birthday
gender
firstName
,middleName
,lastName
,nickname
photoUrl
timestamp_registered
And think over again if it is really needed when you are trying to add another field.
- Don't put user's setting data in
/users/<uid>
. Use may useUserModel.updateSettings()
andUserModel.readSettings()
to manage user's setting.
- So, keep
-
Use
MyDoc
to display my profile data.
- The reason why we need
UserService
is to hold login user'sUserModel
and update it on user document's changes.
-
Create the following four test user accounts with password of
12345a
using email & password sign-in. -
Create an admin with
[email protected]
as its email and12345a
as its password.- And set the uid as admin. Read Setting admin on firestore security rules to know how to set admin.
-
In most cases, you want to use
Firebase Flutter UI
forFirebase Sign-In
and that's very fine. But with thePhone Sign-In
built in UI, it's not easy to handle errors. So, fireflutter provides simple service for phone sign in. -
To use phone sign-in, enable it. (and add some test phone numbers if you wish to test with test phone numbers.)
-
PhoneService
has the service code of phone sign-in.- See example/lib/phone_sign_in folder for sample code. You can copy paste it in your projects.
-
Fireflutter also provides UI widgets to make it easy to use in your app.
- Simply add
PhoneNumberInput
widget to your screen and on code sent, move to sms code input page and addSmsCodeInput
widget. - See example/lib/phone_sign_in_ui foler for sample code.
- Simply add
Example of verifying phone number. Note this example is only for short sample codes.
PhoneService.instance.phoneNumber = FirebaseAuth.instance.currentUser!.phoneNumber!;
PhoneService.instance.verifyPhoneNumber(
/// Once verification code is send via SMS, show a dialog input for the code.
codeSent: (verificationId) => Get.defaultDialog(
title: 'Enter SMS Code to verify it\'s you.',
content: SmsCodeInput(
success: () async {
/// User logged in.
Get.back();
},
error: error,
submitButton: (callback) => TextButton(
child: const Text('Submit'),
onPressed: callback,
),
),
),
success: () => Get.back(),
error: error,
codeAutoRetrievalTimeout: (String verificationId) {
Get.defaultDialog(
middleText:
'SMS code timeouted. Please send it again',
textConfirm: 'Ok',
);
},
);
- This
email authentication under phone sign-in
feature is only the case that the user logged in withphone sign-in
. It may be used in other cases. But we consider theemail authentication
withphone sign-in
only since we havephone sign-in
service.
-
User can update email or verify without updating email.
-
Before email verification screen,
- Show
verify email
button when user has email but not verified. - Show
update email
button when user has- no email or
- has verified email.
- Show
-
When button is pressed, move to email verification screen
- Show
verify email
button if the user has email but not verified. - Show
disabled update email
button if email is not changed, yet or has verified email.- Enable
update email
if email changes.- Note, when new email address is updated to Firebase auth, then, the status of
FirebaseAuth.instance.currentUser!.emailVerified
becomes automaticallyfalse
.- And even if the user changed the email back to the original email address, still, email verification status will be set to
false
.
- And even if the user changed the email back to the original email address, still, email verification status will be set to
- Note, when new email address is updated to Firebase auth, then, the status of
- When
update email
button pressed,- Save email,
- If
requires-recent-login
exception happens,- Send mobile number verification code
- And display sms input code.
- If
- And, send verification email
- Then, listen if email is verified.
- If verified, alert and go home.
- Save email,
- Enable
- Show
UserService.instance.updateAdminStatus()
updates wether the user is an admin or not.
- Why; when user logs in, to know if the user is admin or not, the app must do an extra read on firestore document. And it costs money.
- How; this method will update
isAdmin
to true if he is admin or false if not. - ide effect; there may be cases that
isAdmin
is set to true when the user is no longer an admin. In that case, UI may show admin buttons but the actions will fail based on the security rules. - Usage; call this method when user enters admin page or on any demand.
- Recommendation; Put a secret(fake) widget like 'app version' that displays app version. And when user do 3 taps and long press, redirect the user to admin screen and call
updateAdminStatus()
on entering admin screen. - after calling
updateAdminStatus()
, the user's document will haveisAdmin: true
if the user is admin.
- More often, people want to know if their friends are online or not. Use this feature to know who is online. It has three status; 'online', 'offline', and 'away'.
-
To make it work, install
-
To begin with the presence functionality of users, call
Presence.instance.activate()
. -
To stop(deactivate) the presence functionality, call
Presence.instance.deactivate()
.
class _MainAppState extends State<MainApp> {
@override
void initState() {
super.initState();
Presence.instance.activate();
}
@override
void dispose() {
super.dispose();
Presence.instance.activate(
onError: (e) => print('--> Presence error: $e'),
);
}
}
- To know if a user is online, offline or away, use
UserPresence
widget.
UserPresence(
uid: uid,
builder: (PresenceType type) => Row(
children: [
Icon(
Icons.circle,
color: type == PresenceType.online
? Colors.green
: (type == PresenceType.offline ? Colors.red : Colors.yellow),
),
Text(type.name),
],
),
),
- Run
Presence.instance.activate()
at start if you want to track the presence status of users. - If user didn't login to the device, the user will be offline by default.
- If
Presence
is working, you will see the record in firebase realtime database data section in firebase console.- If no documents appears in firebase realtime database data section, then see the installation and issues.
/presense/$uid
document will be written only when user logs in and out.- When app is closed, the user will be offline.
-
To display a user profile(name or photo), Use
MyDoc
widget that has builder function to build a widget based on the user profile data. -
For the efficiency,
MyDoc
does not listen to the realtime database document change on every instance, since reading the document over and over again may cost a lot of money if it is used in many places.- It listens
UserService.instance.changes
event which only read one time on every user document change. - By doing this,
MyDoc
may be used for the replacement of state management.
- It listens
MyDoc(
builder: (UserModel u) {
return Row(
children: [
Text('name: ${u.displayName}'),
Text(', profile: ${u.photoUrl}'),
],
);
},
),
- Some use cases of
MyDoc
- When user had signed-in Firebase,
auth changes
event happens immediately while the user's document is not available inUserService.instance
- For instance, when app restart, the user signs in to
Firebase Auth
very quickly, and then,UserService
begins to work to get user document intoUserService.instance.user
. So, user document is not available at the time of user sign in. But it is safe to useMyDoc
since it has default empty values until it reads the document for the first time after sign-in. - To know if the user is admin or not, user document must be downloaded from database.
- When user document will updated on every document change, and
MyDoc
will update its child widgets. So,MyDoc
is a perfect solution to use as state manage based on user data change.
- For instance, when app restart, the user signs in to
- When user had signed-in Firebase,
-
To display a other user profile, use
UserDoc
widget.UserDoc
does not listen to the document changes. It is one time read. And it is one time read only for all the app session. That means, it is caching user document and whenUserDoc
is re-used in other places, it does not read the user data again. In this way, it can save money.- For instance, when user scroll up and down on post list screen, the app has to read and download user document over again for the same post since flutter removes widget if it is invisible in list view. With
UserDoc
, you can display other user's data without worry of cost.
- For instance, when user scroll up and down on post list screen, the app has to read and download user document over again for the same post since flutter removes widget if it is invisible in list view. With
-
UserDoc
may be used for displaying signed-in user. Especially for forms.
UserDoc(
uid: user.uid,
builder: (UserModel u) {
return Row(
children: [
Text('name: ${u.name}'),
Text(', profile: ${u.photoUrl}'),
],
);
},
),
- Note, to display if the user is online or offline, see user presence.
- Build and display widgets based on user's auth state changes.
AuthState(
signedIn: (user) => Text('logged in'),
signedOut: () => Text('logged out'),
loader: Text('loading...'),
),
- when A enters a room with B, check if they are blocked. If yes, dispaly a warning.
- when sending message fails, check if they are block and warn properly.
- for instance, A request FriendMap to B, and A cannot send message to B since they are blocked. Then, display proper warning like "failed due to blocked" instead of meaning less message like "failed or permission denied."
-
/chat/messages/<uid>__<uid>
is the collection of a chat room messages. Each document in this collection is the chat message documents that are handled by theChatMessageModel
. This is calledmessage doc
. -
/chat/rooms/<uid>
is the collection of a user's chat friends. The documents inside this collection are the users that he chatted. For instance,/chat/rooms/<uid>/<uid>
is the document of a chat room. This document has the room information. (This is calledroom info doc
.) For instance,/chat/room/A/B
/chat/room/A/C
Then, the userA
have had chat with user B and C. Note that,room info doc
is also handled by theChatMessageModel
.
-
If it needs a speed to work, then just rely on the security rules without check permission before action.
- For instance, when A sends a message to B, it needs a speed. So, don't check if A is allowed to send message to B before it fails.
- Once it fails to send the message, then check what causes the problem.
- For instance, when A sends a message to B, it needs a speed. So, don't check if A is allowed to send message to B before it fails.
-
If it does not need speed, then the app may check permission first.
- For instance, blocking a user does not need a speed. so, the app can check if the user can be blocked before it fails by security rules.
-
Setting
blocked
properties in room info doc -/chat/rooms/<uid>/<uid>.blocked: true
is not working deu to theinequality
feature of Firestore.- You can order by
timestamp
whereblocked == true
. It's againstinequality
rule.
- You can order by
-
To solve this,
- remove blocked user's room info from
/chat/rooms/<my>/<other>
- save user uid at
/chat/blocked/<my>/<other>.timestamp
.
- remove blocked user's room info from
-
When A blocked to B, both cannot send message to each other.
-
ReminderService
is to remind some to users with custom UI.- When the app has some to remind its users, push notification may be one option.
- But push notification does not deliver reminders to the users who registered after sending notifications.
- And it does not have an option like 'remind me later`.
ReminderService
can do this.
- When the app has some to remind its users, push notification may be one option.
-
It uses
/settings/reminder
document.- It is not recommended to edit the docuement directly insdie firebase console.
-
ReminderEdit
widget is a sample code for updating the document. you can customize by copy & paste. -
And
ReminderService.instance.display()
is the default UI to display reminder on app screen. You can also customize the UI by copy & paste.
- To display reminder dialog when there is a reminder, use the code below.
/// Define global key somewhere.
final GlobalKey<NavigatorState> navigatorKey = GlobalKey();
/// Apply it to MaterialApp.
class _MainAppState extends State<MainApp> {
@override
Widget build(BuildContext context) {
return MaterialApp(
navigatorKey: navigatorKey,
);
}
}
/// Listen to reminder
///
/// Delay 3 seconds. This is just to display the reminder dialog 3 seconds
/// after the app boots. No big deal here.
Timer(const Duration(seconds: 3), () {
/// Listen to the reminder update event.
ReminderService.instance.init(onReminder: (reminder) {
/// Display the reminder using default dialog UI. You may copy the code
/// and customize by yourself.
ReminderService.instance.display(
/// Use the global NavigatorState to display dialog.
context: navigatorKey.currentContext!,
data: reminder,
onLinkPressed: (page, arguments) {
Get.toNamed(page, arguments: arguments);
},
);
});
});
-
For updating, reminder, see the sample come of ReminderEditScreen.
-
You may use
controller
to updateimageUrl
outside ofReminderEdit
widget.
final controller = ReminderEditController();
ReminderEdit(
controller: controller,
// ...
);
// ...
controller.state.imageUrl.text = file.url;
controller.state.setState(() {});
-
There are
title, content, imageUrl, link
fields on the form. -
One of
title, content, imageUrl
must have value or dialog will not appear. -
link
has the information to which screen the app should move once user pressed onmore info
button. It must not be an empty string.- When
more info
button is pressed,ReminderService
saves the link on local storage and calls the callback, then app can move the screen.- And when the app start again, it will not get the reminder document again from firestore since the link has already opened.
- When user pressed on
don't show again
button, the link will be saved on local storage and when the app starts again, it will not get the reminder document again from firestore. - When
remind me later
button clicked, the app simply closes the dialog and when the app starts again, the app will fetch the reminder doc from firestore and display the reminder dialog again on screen. - When backdrop had touched, the app works the same as
remind me later
button pressed. link
can have in URL format. For instance,/post-view?postId=123&option=a
. And when callback is being called/post-view
parts goes to first parameter, and{'postId': 123, 'option': a}
goes to next parameter.- If
link
changes, theReminderService
considers as a new link had been activated. - So, if you want to display a reminder dialog again with same url, then you may simply change the parameter a little like
/post-view?postId=123&option=b
.
- If
- Once
link
is saved on local storage,ReminderService
does not get the same document oflink
again from firestore.
- When
-
The default dialog UI has three buttons.
more info
,don't show again
, andremind me later
.- User can press on backdrop and it work just as
reminde me later
button.
-
There are three buttons on
ReminderEdit
widget. You can update the/settings/reminder
document with it.-
When you press
preview
button, you can see the look of the default dialog UI with the reminder data.- When you press
don't show again
button onpreview
UI dialog, it saves the link on local storage. - When you press
more info
button button onpreview
UI dialog, it saves the link on local storage and calls the callback where the app can move to the intended screen. - Since the link saved, when the app restarts the reminder dialog would not appear.
- One fitfall is that, when app starts,
ReminderService
will listen to the/settings/reminder
with the link saved previously. anddon't show again
ormore info
button is pressed onpreview mode
. Then, new link had been saved on local storage. the but new link is not the same link that app is listening to. So, whensave
button pressed, the reminder dialog would popup.
- When you press
-
When you edit and preview, you may add a version (test) value to see the changes.
- For instance,
/post-view?postId=123&version=456
.
- For instance,
-
When you press on
preview
, it does not save the form data into reminder doc in firestore. So, you have to presssave
button to update the reminder doc. And then the updated reminder doc will be downloaded to users' app and reminder UI appears on all the online users' devices. -
You may have an image upload button and update
imageUrl
with the uploaded image. But for now, you can input the imageUrl on theimageUrl
field.
-
-
Only admin whose UID is set in
/settings/admin
can edit the reminder documents. -
There is no fixed size of the image of
imageUrl
. The recommended size would be maximum of 512px width and the ratio of the width 3 and height 2. -
If admin updates the reminder with changes of
link
very quickly like 2 times in a minute, then two popup may appear on user's screen. This won't be happening in production mode and won't be a big trouble.
- Idea
When someone is seeking someone and both of them are foreginers of the place, how would they find each other? Both of them do not understand the country's language.FriendMap
feature send a user's latitude and longitude to the other user. So the other can navigate on the map.
-
Follow the installation instructions in google_maps_flutter package.
Hybrid Composition
could be an option.
-
Follow the installation instructions in geocoding package.
-
Follow the installation in geolocator package.
-
There are two users. User
A
andB
. -
A
sends his latitude and longitude toB
on chat. (So, whenB
is offline, he will get push notification by the built in chat funciton) -
B
opens chat room. -
B
click the link of lat & lon to openFriend Map
. -
the app navigates.
- Use
Inform
feature to inform friend request to the other user.
- Simply update
/location/<A's-uid>/
and/location/<B's-uid>
manully.- To make it easy, update the location programatically.
- When A likes B's post, how the app will inform B that he has a like from A?
- Push notification is one option. But push notification may be delayed more than 1 hour.
Inform
functionality make the communication in realtime.
Let's say the app needs to deliver friend request from A to B.
-
When User
A
request FriendMap to userB
, it's not easy to open FriendMap by clicking the chat message. what if userB
has lots of users and having difficulty to open the chat roomA
?.- The solution would be; when
A
request FriendMap toB
, the app onB
side will openFriendMap
screen automatically. - When
B
is offline and got a push message ofFriendMap
request, the device ofB
will automatically runWonderfulKorea
app and openFriendMap
screen automatically. - Later; it may be an option to open
FriendMap
automatically or not.
- The solution would be; when
-
To make it work
- All user must listen to
/inform/<uid>
when app starts. - When
A
request FriendMap toB
, save lat & long in/inform/<uid>
. - So, the app of
B
can openFriendMap
with the data.
- All user must listen to
-
When
B
is offline, or the app is not running,B
will open the app (by push notification or whatever),- the app of
B
listens/inform/<uid>
- If there is data, then delete the doc, and open FriendMap.
type
has the data type.FriendMap
- it's a data for FriendMap andlatitude
andlongitude
properties are found.type
can be customizable and can have any value and addition properties.
- To start listening the
inform data
, callInformService.instance.init(callback: (data) {})
.
FirebaseAuth.instance.authStateChanges().listen((user) {
if (user != null) {
/// Re-init for listening the login user (when account changed)
InformService.instance.init(callback: (data) {
if (data['type'] == 'FriendMap') {
/// If it's a freind map request, then open friend map screen.
Get.toNamed('/friend-map', arguments: {
'latitude': data['latitude'],
'longitude': data['longitude'],
});
}
});
} else {
InformService.instance.dispose();
}
});
- When the app needs to inform to other user, call
InformService.instance.inform(<uid>, {...data....})
.
InformService.instance.inform(widget.room.otherUid, {
'type': 'FriendMap',
'latitude': pos.latitude,
'longitude': pos.longitude,
});
- To build your app with firelutter, simply add it on pubspec dependency.
- Follow the steps
- fork
- clone
- create a branch
- update fireflutter
- push
- pull request.
- If you are going to use fireflutter, then simply add it on pubspec dependency.
- If you want to build fireflutter while you are building your app, then
- fork fireflutter
- add it as submodule in your project
- add it as pubspec dependency with local path
- when ever you want to update fireflutter, simple run
<submodule-folder>/example/main.dart
- after updating fireflutter, come back to your app and run your app.
- Since the Firebase libraries need to run on an actual device or emulator, we developped our own unit test & UI test.
-
We have local unit test for firestore security rules at
<root>/firebase/test
folder. -
To run the test,
- open
<root>/firebase/test/test.js
and updateTEST_PROJECT_ID
to your firebase project id. - run
$ firebase emulators:start
under<root>/firebase
folder. - run
$ npm test
under<root>/firebase/test
folder.
- open
-
To deploy,
- open
<root>/firebase/.firebaserc
and updateprojects.default
to your firebase project id. - run
$ firebase deploy --only firestore
- open
- These are the common issues you may encount working this package.
- If you have any issues, please create an git issue.
Unhandled Exception: [firebase_database/permission-denied] Client doesn't have permission to access the desired data.
- If you see this error, it means you didn't set the firebase database security rules properly. Refer Firebsae Realtime Database Installation
- Open
GoogleService-Info.plist
underios/Runner
and see if the keyDATABASE_URL
is present. If not, enable firebase realtime database and download theGoogleService-Info.plist
again. Remember to update related settings once you download it again.
If you see this error message while working with Firebase Auth, check the followings;
- Check if REVERSE_CLIENT_ID is set on iOS.
- Check if GCP credential is properly set iOS.
- The implementaion of
Dynamic Links
are based on https://firebase.flutter.dev/docs/dynamic-links/overview
- There are two senarios to handle incoming dynamic link events.
- First, initialize firebase app,
- Then, Pass
await DynamicLinksService.instance.initialLink
to main app.
void main() async {
WidgetsFlutterBinding.ensureInitialized();
await Firebase.initializeApp();
runApp(MainApp(
initialLink: await DynamicLinksService.instance.initialLink,
));
}
- Then, on MainApp, handle the dynamic links if it has any.
class MainApp extends StatefulWidget {
const MainApp({required this.initialLink, Key? key}) : super(key: key);
final PendingDynamicLinkData? initialLink;
@override
State<MainApp> createState() => _MainAppState();
}
class _MainAppState extends State<MainApp> {
@override
void initState() {
if (widget.initialLink != null) {
final Uri deepLink = widget.initialLink!.link;
/// If you do alert too early, it may not appear on screen.
WidgetsBinding.instance?.addPostFrameCallback((dr) {
alert('Terminated app',
'Got dynamic link event. deepLink.path; ${deepLink.path}, ${deepLink.queryParametersAll}');
// Get.toNamed(deepLink.path, arguments: deepLink.queryParameters);
});
}
// ...
- One thing to note on the code above is that, If you do things like (alert, or navigation) too early before the app is rendered, the action may work strange (by racing). So, it would be better to take action after the app is rendered. You may use
Timer
instead ofWidgetsBinding.instance.addPostFrameCallback()
.
- Simply listen to the link event.
DynamicLinksService.instance.listen((Uri? deepLink) {
alert('Background 2',
'Dyanmic Link Event on background(or foreground). deepLink.path; ${deepLink?.path}, ${deepLink?.queryParametersAll}');
});
- To test your dynamic link on iOS, you will need to use a real device as it will not work on a simulator. You will also have to run the app in release mode (i.e. flutter run --release) as iOS will block you from opening the app in debug mode from a dynamic link.
- On Android, you may test with emulator.
-
target
is the data that is reported. It can bepost
,comment
,user
,image
or any thing else. -
targetId
is the key(or document id) of thetarget
. -
timestamp
is the timestamp of server. -
reporterUid
is the uid of the reporter. -
reporteeUid
is the uid of the user who is being reported. It is the user's uid who created the content. -
/reports/
is the report collection. -
/reports/{reportId}
document will have the following data.
{
reporterUid: "...uid of reporter ..."
reporteeUid: "...uid of target data author..."
target: "post, comment, user, file"
targetId: ".... the key (or document id ) of the target"
timestamp: " server time stamp "
reason: "reason of why reporter is reporting"
}
-
The report document key format is
target-targetId-reporterUid
. This is to easily secure by the security rules.- For instance,
post-L8HDc07IYLGWd6puaVrT-1h0pWRlRkEOgQedJL5HriYMxqTw2
.
- For instance,
-
A user cannot report same target & targetId.
- To implement this, simple check if previous report exists.
- This won't cost a lot since reporting does happens often.
- To implement this, simple check if previous report exists.
-
Forum functionality uses firestore to provide maximum flexibility for customzation.
- You may extend forum functionality for shopping app.
- To build shopping app, you may need to manage products as a post model and reviews as comment model.
- You may add extra properties for products(product name, price, etc) and its reviews(rating, etc). And to search the properties, firestore would be better fit than realtime database.
- To build shopping app, you may need to manage products as a post model and reviews as comment model.
- You may extend forum functionality for shopping app.
-
Security
- We want to avoid complicated security rules and cloud functions.
- Mandatory permission check must be done by the security rules, like only allowing document update by the author.
- But counting the like or dislike is not really critical. It won't be a big harm even if there would be a mis-counting. So, we don't do this work on clould functions. Instead, we do it on client side with transaction.
-
Only admin can write the category, but readable to every one.
- Admin can set
backgroundColor
andforegroundColor
that are only extra properties for UI design.- There are no fixed usage of those. It's up to you where you want to use these colors. You may use them to display colors on category menu.
- Admin can set
order
for the priority on the listing.
- Admin can set
-
If category does not exists, posting will be failed.
-
If admin deletes category,
-
The existing posts are still remained.
-
No more post can be created for the deleted category anymore.
-
If admin create a with the same category as the deleted one, then,
-
User can create posts again with that category.
-
One thing to know is that, when category had deleted, the no of posts and no of comments properties are deleted also. And when category had re-created with same category id, the numbrers are not restored. This may lead a problem.
-
@todo so, in the future, if a category has a post, it should not be deleted. And there must be a function to move all the posts from one category to another.
-
-
Post model and comment model are a lot similiar, so they use same
PostModel
. -
PostModel
can be customized and used for something else like shopping mall feature. When you want to build a shopping mall app, it needs product model and the product model may have comments or reviews. The forum functionality with customizedPostModel
can do the shopping mall feature. -
PostModel
has methods like create, update, delete, like, dislike, and so on. -
When user deletes a post, the document is marked as deleted, instead of remove it from the database. And user may update the document even if the post is marked as deleted. Editing post of delete mark is banned by security rule. This is by design and is not harmful. So, there should be some code to inform user not to edit deleted post. This goes the same to comment delete.
-
hasPhoto
becomes true if the post has a photo.- This is a helper property for searching posts that have pohtos. Since firestore cannot have inequality expression on multiple fields, it wil help to search posts that have photos.
-
Date
-
When you want to get 5 posts that have most noOfComments within 7 days, how you would search? The answer is
not so simple
. You may want to keep a separate collection that holds posts that are created within 7 days. And it's not simple work.So, there we added some date information for a better search.
You may do
get 5 posts that have most noOfComments in last week
. But notwithin 7 days
. -
Post document has date information like below
year
- the yearmonth
- the month of a year (1-12)day
- the day of a month (1-31)dayOfYear
- the day of a year (1-366)weekOfYear
- the week of a yearquarter
- the quarter of a year (1-4)timestamp
- database's server time stamp.
-
-
Comments are saved in
/comments
so it is better to be search. If it is saved under/posts/(postId)/comments/
, then it is not easy to search. -
Properties
postId
has the post id of that the comment belongs to.parentId
is the post id if the comment is the immediate child coment of the post.Or parent comment id.uid
is the author id.timestamp
is the server time.
-
User tokens are saved under
/message-tokens/(tokenId)
- properties;
uid
- user id or empty string if user didn't logged in.
- properties;
-
user topic are saved under
/users/(uid)
.{ topics: ['posts_qna', 'posts_discussion', 'comments_qna', ...] }
new logic) terms;
- 'comment notification' - Send me notification for new comments under my posts or comments.
- new sign-in user must unsubscribe to all topics before subscribing to user topics
conditions; - There is no more subscribing for all new posts and all new comments. Users must enable or disable each category indivisually.
ui;
- User can also enable all or disable all by one button touch in the setting screen.
- User can enable or disable selectively in settings screen.
- See https://github.com/withcenter/wonderfulkorea/issues/70 for ui design;
how; - When a user subscribed 'comments_qna' and the user also enabled 'comment notification', and if the user create a post under qna forum, and somebody commented on it. Then, 'comment notification' will be ignored.
- for posts,
A - subscribed 'posts_qna'.
B wrote a post under 'qna'. then send push notification to 'posts_qna'.
then A gets a push notification.
- for comments
R - didn't subscribe both of comments_job and "comment notification".
A - subscribed "comments_job" only.
B - subscribed "comment notification" only.
R wrote a post(postJob) under job cateogry.
A wrote a comment A-1 under postJob.
B wrote a comment B-1 under A-1.
C wrote a comemnt C-1 under B-1.
Then, send push notifications to topic 'comment notification'.
Then, the app needs to find the authors of ancesters. that are R, A and B.
And, see if they subscribed 'comment notification'.
B subscribed 'comment notification', so he got push notification already.
A didn't subscribe 'comment notification', so need to check if he subscribed 'comments_job' and yes, he subscribed to it. so, send a push notification.
R didn't subscribe 'comment notification', so check if he subscribed to 'comments_job' and no, he didn't. so, he gets no push notification.
when user changes devices; - The app knows when the device has a token that are not saved in firestore, it is considered as new device. - Subscribe all the topics that the user has.
when sending push notification fails, see the error messages and remove that token from the database. so, it won't waste the network bandwidth.
- Prepare the data information and replace the value of
to
. Eithertoken
ortopic
ex./topics/posts_qna
DATA='{"notification": {"body": "this is a body","title": "this is a title"}, "priority": "high", "data": {"click_action": "FLUTTER_NOTIFICATION_CLICK", "id": "1", "status": "done"}, "to": "/topics/posts_qna"}'
- use curl to google api to send push notification attaching the data above. make sure to replace the
FCM SERVER KEY
with the google consoleCloud Messaging Server Key
can be found in google console project setting > cloud messaging > server key
curl https://fcm.googleapis.com/fcm/send -H "Content-Type:application/json" -X POST -d "$DATA" -H "Authorization: key=2hU:AP8FpX2kNKZqqzmBdUg_BWuluihF6n............t3ykfXvzks83HWSpA.....oVjaCFN7S"
- Install
Image Resize
extension as described in Firebase Storage Installation. - Set the rules in Firebase Storage section as described in Firebase Storage Installation.
StorageService.instance.pickUpload
will let user to pick an image(or file) and upload it inuploads
folder in firebase storage.
try {
String uploadUrl = await StorageService.instance
.pickUpload(source: ImageSource.gallery, onProgress: print);
alert('Success', 'Image uploaded successfully');
} catch (e) {
error(e);
}
- This will ask user to take a photo from camera or choose a photo from photo library and compress & adjust rotation, then uploads an image into firebase storage. It will generate thumbnail image with
_200x200.webp
suffix.
StorageService.instance.delete()
will delete uploaded image and its thumbnail image.
- When a user presses upload button, the app will ask to choose image selection method.
- Then, upload image using
pickUpload
method.
UploadedImage
widget will display the uploaded image.- It will first try to display thumbnail image. if it fails to display thumbnail image,
- then, it will try to display original image. If it fails to dsipaly original image,
- then it will display the error widget.
- then, it will try to display original image. If it fails to dsipaly original image,
- It will first try to display thumbnail image. if it fails to display thumbnail image,