Installation

import { initializeApp } from "firebase/app";
import { getAnalytics } from "firebase/analytics";
import { getFirestore } from "firebase/firestore";
import { getAuth } from "firebase/auth";

const firebaseConfig = {
  apiKey: "YOUR_API_KEY",
  authDomain: "YOUR_PROJECT.firebaseapp.com",
  projectId: "YOUR_PROJECT_ID",
  storageBucket: "YOUR_PROJECT.firebasestorage.app",
  messagingSenderId: "YOUR_MESSAGING_ID",
  appId: "YOUR_APP_ID",
  measurementId: "YOUR_MEASUREMENT_ID"
};

const app = initializeApp(firebaseConfig);
const analytics = getAnalytics(app);

export const db = getFirestore(app);
export const auth = getAuth(app);

rules_version='2'

service cloud.firestore {
  match /databases/{database}/documents {
    
    // Public read for service status (customer portal)
    match /servicios/{document=**} {
      allow read: if true;
      allow write: if request.auth != null;
    }
    
    // Authenticated users only
    match /autorizados/{document=**} {
      allow read, write: if request.auth != null;
    }
    
    match /clientes/{document=**} {
      allow read, write: if request.auth != null;
    }
    
    match /productos/{document=**} {
      allow read, write: if request.auth != null;
    }
    
    match /ventas/{document=**} {
      allow read, write: if request.auth != null;
    }
    
    match /cortes_caja/{document=**} {
      allow read, write: if request.auth != null;
    }
    
    match /folios/{document=**} {
      allow read, write: if request.auth != null;
    }
    
    match /contadores_folio/{document=**} {
      allow read, write: if request.auth != null;
    }
    
    match /egresos_diarios/{document=**} {
      allow read, write: if request.auth != null;
    }
  }
}

import * as functions from "firebase-functions";

export const mlSearch = functions
  .region("southamerica-east1")
  .https.onRequest(async (req, res) => {
    // Proxy for Mercado Libre API
    // Used by price comparison feature
  });

const userCredential = await signInWithEmailAndPassword(
  auth,
  email.trim(),
  password
);

const docRef = doc(db, "autorizados", user.uid);
const snap = await getDoc(docRef);

if (!snap.exists() || !snap.data().activo) {
  await signOut(auth);
  setError("Usuario no autorizado.");
  return;
}