Call firebase admin api from nextjs without exposing service account
You should not store Firebase credentials in Next.js / React client code. Store service account JSON in Vault; Next.js routes call RealComposer instead of Firebase Admin SDK in serverless bundles. RealComposer Secret Vault injects headers on Cloudflare Workers so only your edge URL is public.