@lecrabe, @rfontanarosa and I worked this out today.
The problem was that we were using firebase/storage for getting the authenticated photo URLs, but angular-fire for auth. Calls to getDownloadURL() didn't have the currently authenticated user's credentials, likely because firebase/storage doesn't know anything about angular-fire, so it wasn't including the user's creds when requesting the URL of the image.
@lecrabe, @rfontanarosa and I worked this out today.
The problem was that we were using
firebase/storagefor getting the authenticated photo URLs, butangular-firefor auth. Calls togetDownloadURL()didn't have the currently authenticated user's credentials, likely becausefirebase/storagedoesn't know anything aboutangular-fire, so it wasn't including the user's creds when requesting the URL of the image.Fixes #1561.