Stack Overflow
Stack Overflow

Questions tagged [firebase-app-check]

App Check works alongside other Firebase services to help protect your backend resources from abuse by allowing only your apps to access them.

App Check works alongside other Firebase services to help protect your backend resources from abuse, such as billing fraud or phishing. With App Check, devices running your app will use an app or device attestation provider that attests to one or both of the following:

  • Requests originate from your authentic app
  • Requests originate from an authentic, untampered device

This attestation is attached to every request your app makes to your Firebase backend resources.

App Check has built-in support for using the following three services as attestation providers:

  • DeviceCheck on iOS
  • SafetyNet on Android
  • reCAPTCHA v3 on web apps

If these are insufficient for your needs, you can also implement your own service that uses either a third-party attestation provider or your own attestation techniques.

App Check currently works with the following Firebase products:

  • Realtime Database
  • Cloud Firestore
  • Cloud Storage
  • Cloud Functions (callable functions)

Related tags

315 questions
0
votes
1 answer

How to make play integrity work with debug key?

We have set up Firebase App Check using Play Integrity in our android app. It works perfectly in release builds but I keep getting permission denied in debug builds. Here is why: The company has a private signing key. The owner uses this key to…
Zahra Jamshidi
  • 681
  • 6
  • 9
0
votes
0 answers

firebase app-check react native using ReCaptcha V3 as CustomProvider

Since ReCaptchaV3Provider can't work in react native I'm trying to use it as a custom provider like const appCheckProvider = new CustomProvider({ getToken: () => // Logic to get the token from recaptcha using the public key }); export const…
Kcyr
  • 99
  • 1
  • 8
0
votes
0 answers

Flutter: Firestore - Do I have to pay for App Check?

Trying to create a folder with Firestore shows me the following message: "W/NetworkRequest( 7340): No App Check token for request.". From research I found out, I need to register app check. App check requires a SHA-256 token though, which I can get…
Goku
  • 49
  • 7
0
votes
0 answers

firebase/flutter - App Check debug provider in an emulator

I try to get a local debug token according to the instructions, but I don't see any in the console. I implemented this code as given. Is it maybe because the release and debug app-check don't work at the same time? Guide:…
Bernhard
  • 188
  • 10
0
votes
0 answers

Firebase AppCheck token always null

I'm having this issue since one week on a Xamarin Android application. I get the token with this method: public async void GetToken() { var AppCheckToken = await AppCheck.GetToken(false); if (AppCheckToken is AppCheckTokenResult Tok) …
Exception
  • 1
  • 1
0
votes
0 answers

Firebase app check not working with React Native + iOS 16 App Attest

I have been trying to get Firebase App Check to work for months and still no luck. I am currently testing on iOS 16.2. I have followed all of these steps and am at a loss: Add the App Check package using yarn add…
Alex
  • 1
0
votes
0 answers

Why am I getting a message that my fireball database is insecure, even after enforcing app check?

I have integrated the Firebase API in my web project. I have also enforced app check in my web project. The following are my database rules: "rules": { ".read": "auth != null", ".write": "auth != null" } Every day I keep getting an email…
user21078995
0
votes
2 answers

Firebase: What signatures should be present in Settings?

In Firebase, whenever I try to write to Firestore I'm getting permission errors in flutter. So I wanted to ask what signatures are you supposed to put in the settings? I'm currently using the services Firestore, Auth, and AppCheck. I have 6…
enchance
  • 29,075
  • 35
  • 87
  • 127
0
votes
2 answers

Is Firebase App Check available for Unity, Godot, or other game engines?

I am about to start making a game for iOS/Android which involves connection to Firebase backend. Since the game contains a bit controversy theme, I'm scared of DDoS kind of attacks. To make protection, I know Google provides Firebase App Check…
s f
  • 1
  • 1
0
votes
0 answers

Firebase App Check Quota Limits when using with firestore SDK in android

Our android app uses firestore as the DB and uses firestore SDK to make the reads and writes. We use firebase app check via safetynet(planning to migrate play integrity) as one of our security measure. FirebaseApp.initializeApp(this) val…
Oooha
  • 150
  • 17
0
votes
1 answer

TypeError: firebaseAdmin.appCheck is not a function in `firebase-admin` appCheck

I am try to implement firebase appCheck as mention in the official documentation https://firebase.google.com/docs/app-check/custom-resource-backend in the node back-end side. version: "firebase-admin": "^9.3.0", node: v16.13.0 But i got a type…
Asanka
  • 552
  • 6
  • 15
0
votes
0 answers

Firebase: Unable to read/write to database after enforcing app check

I am following all the steps accordingly as shown in the app check documentation page. Initially I registered my web application in the official Google reCAPTCHA v3 website and acquired my private and public key. After that, I registered my private…
user20877444
0
votes
2 answers

Firebase: How do I register my Flutter app in app check?

I want to register my Flutter app in Firebase app check. When I try to register, it keeps asking me to upload the private key which should be in P8 format. How do I get this private key? I have created an apple developer account, but I don't know…
user20814526
0
votes
0 answers

Why am I unable to generate a Firebase app check token on an iOS simulator in an Expo project?

I am trying to generate a Firebase app check token on an iOS simulator in an Expo project and am encountering the following error: "error": { "code": 403, "message": "App attestation failed.", "status": "PERMISSION_DENIED" } I have…
Catalin Stefan
  • 62
  • 7
0
votes
1 answer

Firebase Storage and AppCheck too many unverified requests

The situation is as above, I register the urls of the uploaded images in the database and print them like that, could this be the case? Am I doing something wrong with the parameters in the urls I've drawn as…
Cenk YAGMUR
  • 3,154
  • 2
  • 26
  • 42
1 2 3
…
20 21