> Canonical URL: https://codingcat.dev/post/firebase-2025-02-fdc-whats-new

# February Update: What's New in Data Connect in Firebase: Web Architecture & Implementation Guide

![CodingCat.dev tutorial cover image](https://cdn.sanity.io/images/hfh83o0w/production/936f35c0eb375acac295fcf72e5b863f71882da3-1200x630.svg?w=1200&q=82&fit=max&auto=format)[![Alex Patterson](https://cdn.sanity.io/images/hfh83o0w/production/a606dfaa381aab08ddbe16a33fe1d3e1fb37c927-400x400.jpg?w=96&h=96&q=82&fit=max&auto=format)Alex Patterson](/author/alex-patterson)February 27, 2025

For years, choosing Firebase meant trading away relational SQL joins, strict foreign keys, and pgvector similarity search in favor of NoSQL document denormalization. Following the announcement of **February Update: What's New in Data Connect**  by Cynthia Wang on the [**Official Firebase Blog**](https://firebase.blog/posts/2025/02/fdc-whats-new/) (2025-02-26), here is our hands-on CodingCat.dev breakdown of what actually shipped, how it works under the hood, and how we wire it into production TypeScript, Next.js, Astro, SvelteKit, React, and Angular applications. Note: Firebase Data Connect has been renamed to SQL Connect. Learn more in the SQL Connect announcement.

## The Mental Model: Why February Update: What's New in Data Connect Matters for Web Devs

As a Google Developer Expert (GDE) for Firebase and Senior Solutions Engineer at CodingCat.dev, I evaluate every Firebase update through one lens: does it reduce boilerplate while keeping our runtime security and cloud bills predictable? Firebase Data Connect bridges that gap by pairing a managed Google Cloud SQL for PostgreSQL instance with a declarative GraphQL schema compiler that automatically generates type-safe TypeScript, React, and Angular SDKs alongside server-enforced @auth directives.

> AJ Pro-Tip from Alex: Keep your authorization logic inside your Data Connect GraphQL operations using @auth(level: USER) and server-evaluated expressions like auth.uid and request.time rather than trusting client-supplied user IDs in query variables.

## How It Works: Technical Breakdown & Implementation

New year, new features! Built on CloudSQL, Firebase Data Connect is our backend-as-a-service for Postgres. It’s a high-performance, scalable, and secure way to work with relational data using GraphQL. Since our [**previous update**](https://firebase.blog/posts/2024/12/dataconnect-eoy-recap-2024) in ‘24, we’ve been hot at work to make Firebase Data Connect better to use, here’s a peek at what’s new.

### What’s New?

Using React? Now you can generate [**React SDKs**](https://firebase.google.com/docs/data-connect/web-sdk#react) for your projects, with bindings powered by TanStack Query, to integrate your GraphQL operations into your [**React based apps**](https://idx.google.com/new/dataconnect). More frameworks are also in the works, so keep an eye out!

Enable generating React Hooks in `connector.yaml`:

```
generate:
  javascriptSdk:
    react: true
    outputDir: "../movies-generated"
    package: "@movie-app/movies"
    packageJsonDir: "../../"
```

```
import

function
    const
    if
        return
    }
    if
        return
    }

    return

Learn more about React support in the [**documentation**](https://firebase.google.com/docs/data-connect/web-sdk#react).

Moving data just got easier. With PGLite, you can quickly [**import and export**](https://firebase.google.com/docs/data-connect/cli-reference#export-import-data) your database, whether you’re migrating, backing up, or setting up a fresh project.

The Firebase team heard your feedback! You can now see the distance from the query vector in your similarity search results by selecting the `_metadata.distance` field:

```
query
  movies_descriptionEmbedding_similarity(
    compare_embed: {
    within:
    where: {
    {
      id
      title
      description
      _metadata {
        distance
      }
    }
}
```

This makes it easy to choose a good value for `within` and tune your search performance.

`@check` can now be used for [**queries**](https://firebase.google.com/docs/data-connect/authorization-and-security#use_in_queries) as well as [**mutations**](https://firebase.google.com/docs/data-connect/authorization-and-security#use_in_mutations)! Define authorization rules with CEL expressions, allowing you to reference data from other tables and apply conditional logic for more precise access control.

```
query
    user(id: $userId) {
        privacySetting
            @check
                expr:
                message:
            )
            @redact
        favoriteMovies
            movie {
                id
                title
                genre
            }
        }
    }
}
```

Android developers, we’ve got something for you! The new [**quickstart**](https://github.com/firebase/quickstart-android/tree/master/dataconnect) sample app shows you how to use Firebase Data Connect in an Android app, so you can start building right away.

### Watch the Latest Livestream

Want a closer look? We hung out with Firebase After Hours for a live demo and some great Q&A. Check out the replay here: [**Firebase After Hours #9: Firebase Data Connect: SQL or NoSQL, that is no longer the question**](https://www.youtube.com/watch?v=DgqJMpc0uh4)

### Don’t forget to share your thoughts

## Production Web Architecture & Security Checklist

Whether we are deploying on [**Firebase App Hosting**](https://firebase.google.com/docs/app-hosting), Cloudflare Workers, or Vercel, shipping SQL features to production requires defense-in-depth across three layers:

- **Enforce Firebase App Check & Attestation: ** Protect your web endpoints, Cloud Functions, Data Connect GraphQL resolvers, and Firebase AI Logic calls against unauthorized replay or billing abuse using [**Firebase App Check with reCAPTCHA Enterprise**](https://firebase.google.com/docs/app-check).
- **Validate Locally with the Firebase Emulator Suite: ** Run deterministic integration tests against local Firestore, Auth, Functions, and Data Connect PostgreSQL emulators before promoting schema or rule changes to production.
- **Keep Server & Client Boundaries Type-Safe: ** Use the modular Firebase Web SDK and generated TypeScript bindings so SSR frameworks like Next.js, Astro, SvelteKit, and Angular serialize state cleanly without hydration flickers.

## Conclusion

Accelerate your full-stack web and AI development by pairing **February Update: What's New in Data Connect**  with strict Security Rules, Firebase App Check, and local emulator testing. Come tell us on [**X (@CodingCatDev)**](https://x.com/CodingCatDev) and [**LinkedIn (CodingCat.dev)**](https://www.linkedin.com/company/codingcatdev) how you are using Firebase in your stack, and subscribe to the [**CodingCat.dev YouTube Channel**](https://www.youtube.com/@CodingCatDev?sub_confirmation=1) so you don't miss what we build next!

## Watch Our Related Firebase Video Tutorial on YouTube

Want to see how we architect and debug Firebase web applications live? Watch our related CodingCat.dev session [**Firebase SQL with Data Connect**](https://youtu.be/N25khadfUag) below, and make sure to [**Subscribe to CodingCat.dev on YouTube**](https://www.youtube.com/@CodingCatDev?sub_confirmation=1) for weekly full-stack web and AI deep dives:

## Resources, Official Docs & Related CodingCat.dev Guides

- **Primary Release Source: ** [February Update: What's New in Data Connect on the Official Firebase Blog](https://firebase.blog/posts/2025/02/fdc-whats-new/) (published 2025-02-26 by Cynthia Wang)
- **Official Firebase Documentation: ** [Firebase Developer Docs & Web SDK Reference](https://firebase.google.com/docs/web/setup)
- **Related on CodingCat.dev: [Firebase + Gemini Code Assist](/post/firebase-2025-03-gemini-code-assist)**
- **Related on CodingCat.dev: [Add image generation to your apps with Imagen 3](/post/firebase-2025-03-imagen3-support-on-vertex-ai-sdks)**
- **Related on CodingCat.dev: [Firebase SQL with Data Connect](/podcast/firebase-sql-with-data-connect)**
- **Related on CodingCat.dev: [Build a Custom No-Code App in 90 Minutes](/podcast/build-a-custom-no-code-app-in-90-minutes)**

## Frequently Asked Questions (FAQ)

### What are the key capabilities introduced in February Update: What's New in Data Connect?

February Update: What's New in Data Connect (announced 2025-02-26 by the Firebase team) enhances the platform for Firebase, Google Cloud, Web Dev, SQL, React, Security workloads. Note: Firebase Data Connect has been renamed to SQL Connect. Learn more in the SQL Connect announcement. Developers can review the primary announcement on the [**Firebase Blog**](https://firebase.blog/posts/2025/02/fdc-whats-new/) alongside our implementation patterns and production checklist above.

### How do web developers use February Update: What's New in Data Connect with Next.js, SvelteKit, React, or Angular?

Web developers can integrate these features using the modular Firebase JavaScript/TypeScript SDK, Firebase Data Connect web bindings, and [**Firebase App Hosting**](https://firebase.google.com/docs/app-hosting). Always pair client-side SDK initialization with Firebase App Check and strict Security Rules, and test locally with the Firebase Local Emulator Suite before deploying.

### Where can I watch video tutorials on Firebase Web and AI development?

You can watch our hands-on Firebase video walkthroughs on the [**CodingCat.dev YouTube Channel**](https://www.youtube.com/@CodingCatDev?sub_confirmation=1), including [**Firebase SQL with Data Connect**](https://youtu.be/N25khadfUag), and follow us on [**X (@CodingCatDev)**](https://x.com/CodingCatDev) for weekly full-stack tutorials.

## Recent Posts

[View More](/blog/page/1)[![PHP2Shell (CVE-2026-109618): How AI Found a Decade-Old Bug in 70% of the Web](https://cdn.sanity.io/images/hfh83o0w/production/e83065d0a4e2f841ce64d3f4aea8ddbbf07e5cb9-1376x768.jpg?w=1376&q=82&fit=max&auto=format)](/post/php2shell-cve-2026-109618-ai-php-security-scramble)

### [PHP2Shell (CVE-2026-109618): How AI Found a Decade-Old Bug in 70% of the Web](/post/php2shell-cve-2026-109618-ai-php-security-scramble)

October 22, 2026

Two critical pre-authentication RCE flaws in PHP (CVE-2026-109618 and CVE-2026-109619), uncovered by AI models from OpenAI and Google Gemini, sparked a global patching scramble across 70% of the web. Here is how PHP2Shell works and how to patch your servers.

[![Alex Patterson](https://cdn.sanity.io/images/hfh83o0w/production/a606dfaa381aab08ddbe16a33fe1d3e1fb37c927-400x400.jpg?w=96&h=96&q=82&fit=max&auto=format)Alex Patterson](/author/alex-patterson)[![Sanity Knowledge Bases](https://cdn.sanity.io/images/hfh83o0w/production/38b0f021c51d97043c8a1ebf31d505a0ea877b7c-2752x1536.jpg?w=1920&q=82&fit=max&auto=format)](/post/sanity-knowledge-bases)

### [Sanity Knowledge Bases](/post/sanity-knowledge-bases)

October 17, 2026

Eliminate query-time guessing in your AI agents. Learn how Sanity Context Knowledge Bases compile structured datasets, crawled documentation websites, and uploaded files ahead of time, resolve conflicting facts, and serve a compact outline over Context MCP.

[![Alex Patterson](https://cdn.sanity.io/images/hfh83o0w/production/a606dfaa381aab08ddbe16a33fe1d3e1fb37c927-400x400.jpg?w=96&h=96&q=82&fit=max&auto=format)Alex Patterson](/author/alex-patterson)