Lead Lock: Firebase Setup Guide

{
  "target_url": "https://example.com",
  "contact_email": "test@example.com",
  "captured_at": "Server Timestamp",
  "status": "new",
  "type": "audit",
  "uid": "anonymous_user_id"
}

rules_version = '2';

service cloud.firestore {
  match /databases/{database}/documents {
    // Deny all reads and writes by default
    match /{document=**} {
      allow read, write: if false;
    }

    // Allow creating new leads if the user is authenticated anonymously
    // and the data is valid.
    match /structure1_leads/{leadId} {
      allow create: if request.auth != null &&
                       request.resource.data.target_url is string &&
                       request.resource.data.contact_email is string &&
                       request.resource.data.uid == request.auth.uid &&
                       request.resource.data.captured_at == request.time &&
                       request.resource.data.status == 'new' &&
                       request.resource.data.type == 'audit';

      // Disallow any updates, deletes, or reads from the client
      allow read, update, delete: if false;
    }
  }
}