Firebase Hosting - Members Only / Secured Webpages?

I understand that there are Realtime Database Rules which can be configured to restrict access to data at multiple levels. That's great. What about hosting? Are 'Members Only' we

Solution 1:

Firebase Hosting doesn't have any kind of access control presently, and you're correct that the HTML/JS/CSS will all be downloaded even if you're hiding and showing it based on Firebase Auth state.

Depending on your application, that may actually be just fine! Since you can control what users actually do using Firebase Database security rules, it isn't really a big deal if users can dig into the code and see functionality that they can't actually utilize.

If it is important to hide the capabilities of the application, you could dynamically load JS/HTML from the database or Firebase Storage only after authorization.