The supplied auth credential is malformed or has expired

Question

In my Android app I'm signing in via Firebase AuthUI using Google sign in. That part works. Now I tried to sign in using the IdToken but I always get this error message:

com.google.android.gms.tasks.RuntimeExecutionException: com.google.firebase.auth.FirebaseAuthInvalidCredentialsException: The supplied auth credential is malformed or has expired. [ Invalid id_token in IdP response: XXXXXXX... ]

This works and logs me in successfully in my Firebase project:

@OnClick(R.id.sign_in)
public void signIn() {
    startActivityForResult(
            AuthUI.getInstance().createSignInIntentBuilder()
                    .setTheme(getSelectedTheme())
                    .setLogo(getSelectedLogo())
                    .setAvailableProviders(getSelectedProviders())
                    .setTosAndPrivacyPolicyUrls(getSelectedTosUrl(),getSelectedPrivacyPolicyUrl())
                    .setIsSmartLockEnabled(true,
                            true)
                    .build(),
            RC_SIGN_IN);
}

But trying to use signInWithCredential using credentials made from the IdToken gives me the error above:

@Override
protected void onActivityResult(int requestCode, int resultCode, Intent data) {
    super.onActivityResult(requestCode, resultCode, data);
    if (requestCode == RC_SIGN_IN) {
        handleSignInResponse(resultCode, data);
        return;
    }

}

@MainThread
private void handleSignInResponse(int resultCode, Intent data) {
    IdpResponse response = IdpResponse.fromResultIntent(data);

    if (resultCode == RESULT_OK) {
        FirebaseAuth auth = FirebaseAuth.getInstance();
        FirebaseUser firebaseUser = auth.getCurrentUser();

        if(firebaseUser != null){

            auth.getCurrentUser().getIdToken(true).addOnCompleteListener(task -> {

                String idToken = task.getResult().getToken();
                AuthCredential cred = GoogleAuthProvider.getCredential(idToken ,null);

                auth.signInWithCredential(cred).addOnCompleteListener(task1 -> 
                        Log.v(TAG,"results: " + task1.getResult()));

            });
        }
    }
}

I'm following this tutorial and my goal is to sign in to multiple Firebase projects.

Trying to sign in to a secondary Firebase project using the credentials from the IdToken above returns the same error.

FirebaseApp app = FirebaseApp.getInstance("secondary");
FirebaseAuth.getInstance(app).signInWithCredential(credential);

check your date and time – Farido mastr Apr 10 '21 at 13:08 — Farido mastr, Apr 10 '21 at 13:08

score 37 · Answer 1 · answered Sep 01 '20 at 06:20

37

I got this error when the time or time zone on the device was wrong. Setting the correct time solved it.

answered Sep 01 '20 at 06:20

Daniel

2,415
3
24
34

1

Thanks! This helped a lot. I was doing some testing with the device time settings. Didn't expect that it would mess up with my authentication. – Dominic Orga Dec 26 '20 at 13:00
2

Indeed, Check your timezone, restart your phone and it might actually fix it – Casareafer Dec 04 '21 at 14:31
2

Restarting the Emulator updated the time and fix the error. – vovahost Jan 18 '23 at 08:49

score 0 · Answer 2 · answered Jul 01 '20 at 22:20

0

I suggest you try to update the firebase auth plugin or google sign in plugin

answered Jul 01 '20 at 22:20

Oreofe Solarin

286
5
13

score 0 · Answer 3 · answered Feb 12 '23 at 16:30

I encountered this while I was developing an App in Flutter. I have the proper timezone set on my device, yet I faced this issue.

The reason was due to an obvious mistake. I didn't add this to my info.plist

<!-- Put me in the [my_project]/ios/Runner/Info.plist file -->
<!-- Google Sign-in Section -->
<key>CFBundleURLTypes</key>
<array>
    <dict>
        <key>CFBundleTypeRole</key>
        <string>Editor</string>
        <key>CFBundleURLSchemes</key>
        <array>
            <!-- TODO Replace this value: -->
            <!-- Copied from GoogleService-Info.plist key REVERSED_CLIENT_ID -->
            <string>com.googleusercontent.apps.861823949799-vc35cprkp249096uujjn0vvnmcvjppkn</string>
        </array>
    </dict>
</array>
<!-- End of the Google Sign-in Section -->

The official documentation link is here

The supplied auth credential is malformed or has expired

3 Answers3

Linked