So I have been developing a some kind of social networking app by myself. Its not very big, however, I'm kind of worried about the security issues of all manners that exists, especially with my server.
I'm thinking that it will be better for my app client to send requests, like login credentials, to Firebase, and then have my backend always checking for Firebase updates. Then store the data sent from my Firebase to my RDB after my Django server-side manipulates the data. I was thinking this so that there may be extra security rather than having all security features built by myself and the Django REST Auth.
Do you think this is good or it will affect performance tremendously? I plan to use Firebase for real time notification too.
So basically "Web app/Mobile App Client --> Firebase --> Django REST --> Database" for posts, and "Web App/Mobile App Client --> Firebase" for real time notifications.