Firebase bolt rules for the Password Keeper App

password-keeper-rules.bolt

path /users/$uid {
  read() = isCurrentUser($uid);
  write() = isCurrentUser($uid);
}

path /users/$uid/$password is Password;

type Password {
  service: String,
  password: String,
  username: String | Null
}

isCurrentUser(userid) = auth != null && auth.uid == userid;

password-keeper-rules.generated.json

{
  "rules": {
    "users": {
      "$uid": {
        ".read": "auth != null && auth.uid == $uid",
        ".write": "auth != null && auth.uid == $uid",
        "$password": {
          ".validate": "newData.hasChildren(['service', 'password'])",
          "service": {
            ".validate": "newData.isString()"
          },
          "password": {
            ".validate": "newData.isString()"
          },
          "username": {
            ".validate": "newData.isString() || newData.val() == null"
          },
          "$other": {
            ".validate": "false"
          }
        }
      }
    }
  }
}