This is the code repository accompanying blog post: Domain-object authorization (ACL) with Firebase Auth custom claims and Spring Security