3

Whenever I deploy a website in Firebase hosting, first I run them in firebase preview channel with the preview channel name as alpha The command for deploying to preview channel is

firebase hosting:channel:deploy alpha

The issue with this is that after one expiration of channel when I create new channel it creates a new URL in the form of

https://<project-id>--alpha-<random-hash>.web.app

where random-hash is different every time. Since my website has Google sign-in and my project has HTTP referrer set to the web API key for security reasons, with the new preview URL created every time my Google sign stops working with the error:

{"error":{"code":403,"message":"Requests from referer https://<project-id>--alpha-<random-hash>.web.app/ are blocked.","errors":[{"message":"Requests from referer https://<project-id>--alpha-<random-hash>.web.app/ are blocked.","domain":"global","reason":"forbidden"}],"status":"PERMISSION_DENIED"}}

Is there a general way to add HTTP referrer in Google API console for website pattern like below

https://<project-id>--alpha-*.web.app

Right now adding this gives an error in the Google API console

AndroidEngineX
  • 975
  • 1
  • 9
  • 22
  • I have the same problem. You can add this domain `--alpha-*.web.app` (without the https://) in the console and it doesn't report any errors, but it doesn't work. Were you able to get it to work? – Johnny Oshika Apr 06 '21 at 12:28
  • 1
    The way I was able to get it to work was with this `*.web.app/*`. But it unfortunately widens the domain whitelist more than I want. – Johnny Oshika Apr 06 '21 at 12:30
  • 1
    @JohnnyOshika Widening the allowed domain defeats the purpose of setting this whitelisting – AndroidEngineX Apr 26 '21 at 13:03

0 Answers0