title: Firebase authentication process for Python desktop application
body: <p>I want some help with the database implementation in my project.</p>
  <p>The final implementation:
  Website:
  I want to make a (flask) website where the user can create or delete an account.
  Desktop application:
  I also want to make a (PyQt) python application that the user can log in to his/her account via a login prompt.
  Database:
  I want to make a (firebase) database so the users can authenticate. The database will also collect some user information except the authentication credentials.</p>
  <p>The implementation until now:
  Firebase:
  I created a “web app” in firebase so I communicate with firebase via firebaseConfig</p>
  <p>Flask website:
  I created a flask website that communicates with the firebase via the firebaseConfig. The user fills in a form, and the firebase authentication creates a user via (create_user_with_email_and_password). The database, also, collects some extra user information.
  (I think that my code is “safe” as it is server-side)</p>
  <p>The problem:</p>
  <p>Python application:
  I created a python application that the user can log in to the firebase authentication. The problem I faced is that I “have to” include the firebaseConfig in my python code. With the firebaseConfig I can create and delete users, but I don’t want the other users to have the ability to do this.
  (so I think my code is unsafe because the communication with the firebase is client-side so someone may decompile the code and get the firebaseConfig).</p>
  <p>What is the best way to make my project safer?</p>