Firebase用户标识符与数据绑定方法技术咨询

Hey there! Great question—binding a user’s unique uid to your custom Users and Articles data models is a fundamental pattern in Firebase, and it’s totally straightforward once you know the workflow. Let’s break this down step by step.

When you create a user via Firebase Auth, the returned user object includes a unique, immutable uid. The best practice here is to use this uid as the document ID for your Users collection (it’s faster to query and avoids duplicate user entries). Alternatively, you can store it as a field inside the document, but using it as the ID is preferred.

Here’s a code example (using Firebase Web SDK v9) that creates a user and immediately binds their uid to the Users collection:

import { getAuth, createUserWithEmailAndPassword } from "firebase/auth";
import { getFirestore, doc, setDoc } from "firebase/firestore";

const auth = getAuth();
const db = getFirestore();

// Create user and link to Users collection
createUserWithEmailAndPassword(auth, userEmail, userPassword)
  .then((userCredential) => {
    const user = userCredential.user;
    const userId = user.uid;

    // Use the uid as the document ID (recommended)
    return setDoc(doc(db, "Users", userId), {
      email: user.email,
      displayName: user.displayName || "New User",
      avatarUrl: "", // Add your custom user fields here
      createdAt: new Date()
    });
  })
  .then(() => {
    console.log("User created and linked to Users collection successfully!");
  })
  .catch((error) => {
    console.error("Error during user creation:", error);
  });

Why use the uid as the document ID? It lets you fetch a user’s data in a single, direct call (doc(db, "Users", userId)) instead of running a query to find the user by their uid field. It also guarantees that each user has exactly one entry in the Users collection.

For your Articles data, you’ll want to store the author’s uid as a field in each article document. This creates a link between the article and its creator, making it easy to fetch all articles written by a specific user later.

Here’s how to create an article tied to the current logged-in user’s uid:

// Get the currently logged-in user
const currentUser = auth.currentUser;
if (!currentUser) {
  console.error("No user is logged in!");
  return;
}

// Function to add a new article with author uid
const addUserArticle = async (articleTitle, articleContent) => {
  try {
    // Generate a new document reference (Firestore auto-creates an ID)
    const newArticleRef = doc(collection(db, "Articles"));
    
    await setDoc(newArticleRef, {
      title: articleTitle,
      content: articleContent,
      authorUid: currentUser.uid, // Critical: Link the article to the user's uid
      createdAt: new Date(),
      likes: 0
      // Add other custom article fields here
    });

    console.log("Article created and linked to author successfully!");
  } catch (error) {
    console.error("Error creating article:", error);
  }
};

// Example usage
addUserArticle("My First Firebase Article", "This is the content of my article...");

Later, to fetch all articles written by a specific user, you can run a query filtered by the authorUid field:

const getUserArticles = async (userId) => {
  const articlesRef = collection(db, "Articles");
  const userArticlesQuery = query(articlesRef, where("authorUid", "==", userId));
  
  const querySnapshot = await getDocs(userArticlesQuery);
  const userArticles = [];
  
  querySnapshot.forEach((doc) => {
    userArticles.push({ id: doc.id, ...doc.data() });
  });
  
  return userArticles;
};

Don’t forget to set up Firestore Security Rules to ensure only authorized users can modify their own data. Here’s a basic set of rules to enforce this:

rules_version = '2';
service cloud.firestore {
  match /databases/{database}/documents {
    // Allow users to read/write only their own User document
    match /Users/{uid} {
      allow read, write: if request.auth != null && request.auth.uid == uid;
    }
    // Allow users to create articles linked to their uid, and modify only their own articles
    match /Articles/{articleId} {
      allow create: if request.auth != null && request.resource.data.authorUid == request.auth.uid;
      allow read: if true; // Adjust this if you want to restrict article access
      allow update, delete: if request.auth != null && resource.data.authorUid == request.auth.uid;
    }
  }
}

内容的提问来源于stack exchange，提问作者Oleksandr Matrosov