How to protect firebase data from being accessed out side the app?

Question

I have an video streaming android app. Firebase project contains videos links and meta. I have implemented authentication and firebase database rules so that only authenticated users can access those videos.

Still someone is able to access the links and downloading videos to upload on youtube.

So my question is how to completely stop users from accessing my json outside the app. I have limited the read operation only to authenticated users.

Is it possible for anyone to signup to my project using command line and then accessing the data?

Answer 1

I think the problem could be this:

1. Authenticated users get the link to your video
2. They download it while authenticated
3. They do what they want with the video (and they don't need to be authenticated again)

There are no easy solutions to this common problem.

You should encrypt the streaming data passed between the server and client using technologies like DRM and HDCP which is the one Netflix uses in their website to send data to a TV.

You probably need to understand how much big is your business and if it's worth proceeding in this direction implementing the necessary part.

Useful links:

• Google encrypt/decrypt media packager
• A guide on how to implement DRM content in exo player
• DRM used by Netflix and others on their Website