Cloud Storage for Firebaseから公開URLと署名付きURLを発行する

const fireStorage = getStorage();

const bucketFile = await fireStorage.bucket().file(file as string);

const publicUrl = bucketFile.publicUrl(); // 公開URLの取得
const signedUrl = await bucketFile.getSignedUrl({ // 署名付きURLの取得
  action: 'read',
  expires: Date.now() + 1000 * 60 * 60,
});

service firebase.storage {
  match /b/{bucket}/o {
    match /{allPaths=**} {
      allow read: if request.auth != null;
    }
  }
}

Permission 'iam.serviceAccounts.signBlob' denied on resource (or it may not exist).

gcloud projects add-iam-policy-binding PROJECT_ID \
  --member="serviceAccount:プロジェクト名@appspot.gserviceaccount.com" \
  --role="roles/iam.serviceAccountTokenCreator"