From 4864eb197c58f35fdd666d1a6f1fadbfbb75bc83 Mon Sep 17 00:00:00 2001 From: Jonathan Edey Date: Mon, 18 Dec 2023 17:04:44 -0500 Subject: [PATCH] Added service account management note. --- CONTRIBUTING.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index ea9063ade..c06d7de2c 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -174,6 +174,7 @@ authorize access to your Firebase project: which is required for all integration tests. This can be downloaded as a JSON file from the **Settings > Service Accounts** tab of the Firebase console when you click the **Generate new private key** button. Copy the file into the repo so it's available at `cert.json`. + > **Note:** Service accounts should be carefully managed and their keys should never be stored in publicly accessible source code or repositories. 2. Web API key: This allows for Auth sign-in needed for some Authentication and Tenant Management