Firebse Hosting is for public access, if authorization is needed then you should consider a server (Cloud Run, Cloud Functions... etc.) where access to those servers can be managed by IAM or implement an authorization middleware yourself with basic auth or something else