I’m developing a system with a Python backend + Next.js 14 frontend, both running in a containerized setup. Initially, Next.js was not used for frontend; that is why the backend is in Python. We use Firebase for user authentication and Firestore as our database. User routing and resource access are managed by checking permissions in Firestore. Currently, the frontend accesses the backend using an API key stored in an environment variable, without any further checks.