Enable ESP to invoke Firebase Security rules.

contrib/endpoints/src/api_manager/check_security_rules.cc

@@ -56,12 +56,8 @@ const char kRequest[] = "request";
 const char kContentType[] = "Content-Type";
 const char kApplication[] = "application/json";
 
-const std::string GetFirebaseServer(const context::RequestContext &context) {
-  return context.service_context()
-      ->config()
-      ->server_config()
-      ->api_check_security_rules_config()
-      .firebase_server();
+const std::string &GetFirebaseServer(const context::RequestContext &context) {
+  return context.service_context()->config()->GetFirebaseServer();
 }
 
 void SetProtoValue(const std::string &key,

contrib/endpoints/src/api_manager/config.cc

@@ -513,5 +513,9 @@ void Config::SetJwksUri(const string &issuer, const string &jwks_uri,
   }
 }
 
+const std::string &Config::GetFirebaseServer() {
+  return server_config_->api_check_security_rules_config().firebase_server();
+}
+
 }  // namespace api_manager
 }  // namespace google

contrib/endpoints/src/api_manager/config.h

@@ -78,6 +78,9 @@ class Config {
   void SetJwksUri(const std::string &issuer, const std::string &jwks_uri,
                   bool openid_valid);
 
+  // Get the Firebase server from Server config
+  const std::string &GetFirebaseServer();
+
  private:
   GOOGLE_DISALLOW_EVIL_CONSTRUCTORS(Config);
 

contrib/endpoints/src/api_manager/config_test.cc

@@ -870,6 +870,23 @@ TEST(Config, TestCorsDisabled) {
   ASSERT_EQ(nullptr, method1);
 }
 
+TEST(Config, TestFirebaseServerCheck) {
+  MockApiManagerEnvironmentWithLog env;
+
+  static const char server_config[] = R"(
+api_check_security_rules_config {
+  firebase_server: "https://myfirebaseserver.com/"
+}
+)";
+
+  std::unique_ptr<Config> config =
+      Config::Create(&env, kServiceNameConfig, server_config);
+  ASSERT_TRUE(config);
+
+  auto server = config->GetFirebaseServer();
+  ASSERT_EQ(server, "https://myfirebaseserver.com/");
+}
+
 }  // namespace
 
 }  // namespace api_manager

contrib/endpoints/src/api_manager/context/service_context.h

@@ -66,7 +66,8 @@ class ServiceContext {
   }
 
   bool IsRulesCheckEnabled() const {
-    return RequireAuth() && config_->server_config() &&
+    return RequireAuth() && service().apis_size() > 0 &&
+           config_->server_config() &&
            config_->server_config()->has_api_check_security_rules_config() &&
            !config_->server_config()
                 ->api_check_security_rules_config()