API key and APP ID are not private for firebase :) They are for IDENTITY not AUTH.

https://firebase.google.com/docs/projects/api-keys#faq-requi...