Stack Overflow
Stack Overflow

Questions tagged [firebase-app-check]

App Check works alongside other Firebase services to help protect your backend resources from abuse by allowing only your apps to access them.

App Check works alongside other Firebase services to help protect your backend resources from abuse, such as billing fraud or phishing. With App Check, devices running your app will use an app or device attestation provider that attests to one or both of the following:

  • Requests originate from your authentic app
  • Requests originate from an authentic, untampered device

This attestation is attached to every request your app makes to your Firebase backend resources.

App Check has built-in support for using the following three services as attestation providers:

  • DeviceCheck on iOS
  • SafetyNet on Android
  • reCAPTCHA v3 on web apps

If these are insufficient for your needs, you can also implement your own service that uses either a third-party attestation provider or your own attestation techniques.

App Check currently works with the following Firebase products:

  • Realtime Database
  • Cloud Firestore
  • Cloud Storage
  • Cloud Functions (callable functions)

Related tags

315 questions
0
votes
1 answer

Outgoing HTTP requests involved in App Check token verification

I'm trying to verify Firebase App Check tokens on my custom backend. Everything is fine so far, but there's one thing I'm not sure about: My backend is hosted on a private network therefore I need to know if grabbing key sets from…
mono blaine
  • 1,001
  • 9
  • 13
0
votes
0 answers

Firebase App check - Website invalid requests

I have a website that uses firebase firestore and recently activated AppCheck, it seems to be working okay when I just activated but now I am getting heaps of invalid requests. This appCheck is only used for the website so I am a bit concerned if…
learnforever
  • 33
  • 5
0
votes
0 answers

How to Decode Apple App Attestation Statement?

I'm trying to perform the Firebase App Check validation using REST APIs since it's the only way when developing App Clips as they dont' support sockets. I'm trying to follow Firebase docs. All I'm having trouble with is the decoding of the App…
MatBuompy
  • 402
  • 5
  • 12
0
votes
0 answers

Firebase AppCheck for macOS Application

I'm building an admin macOS application with Firebase AppCheck which will only live in 2 or 3 laptops at the moment, which means I don't believe I need to upload to the App Store. To distribute this app I'm using the "Development. Distribute to…
favs
  • 184
  • 6
0
votes
1 answer

How do I enable Firebase app check for my android application?

I want to enable Firebase app check for my android application. I've learned that I have to register an attestation firstly. As SafetyNet is deprecated, I've decided to go for the Play Integrity attestation. Now, it's asking for a SHA 256…
user20539016
0
votes
1 answer

How do I add the Firebase app check SDK in my web app?

I have registered my reCAPTCHA v3 secret key in my Firebase console for my web app. Now I want to add the app check SDK in my client side. These are my imports in my index.html:
user20537113
0
votes
0 answers

Invalid Request on Upgrading Firebase App Check plugin

I have been using Firebase app Check plugin in my project(Android Only). Recently i upgraded the plugin from 0.0.7+1 to 0.1.1+4 and it broke. Now i am not able to use AppCheck in my projects and it say invalid request. What is the proper way to…
Raj Maheshwari
  • 204
  • 2
  • 5
0
votes
0 answers

How to implement firebase app check in Firecms? Any ideas would surely help.Thank you

How to implement firebase app check in Firecms? Any ideas would surely help.Thank you .How to implement firebase app check in Firecms? Any ideas would surely help.Thank you
Sudip
  • 1
0
votes
0 answers

How do I enable reCAPTCHA v3 app check in my web app?

I want to enable reCAPTCHA v3 app check in my web project. These are the steps I've followed: Firstly, I got my private and public reCAPTCHA v3 keys from the official admin site. These are the imports I had added in my html page, after that: …
user20510026
0
votes
1 answer

Why does firebase-appcheck-debug-testing fail to build under SDK version 31?

When I try to build my app which relies upon Firebase App Check and the debug provider under SDK version 31, as required by Google Play, I get a Manifest merger error_: Warning: Package name 'com.google.android.play.core.client' used in:…
Adam Williams
  • 1,712
  • 3
  • 17
  • 30
0
votes
0 answers

Is there a way to unregister Recaptcha V3 for a web app in the firebase console (Firebase App Check)?

One of my mobile app project (React Native) contains a "web application" and an "android application". I have registered the web application to use RecaptchaV3 only to realize afterwards that I couldn't implement the logic recommended by the…
Kwami MAYEDEN
  • 1
  • 1
0
votes
1 answer

Why Firebase App Check fails in app release but not in debugging mode?

I have a React-Native app and I am using the firebase SDK for React-Native. I have just implemented App-Check for my app and it works fine in debugging mode, but it fails in Release. Here is the code for app-check in index.js which is triggered as…
showtime
  • 1
  • 1
  • 17
  • 48
0
votes
1 answer

Firebase app check not working with iOS 16

It looks like for my app the firebase app check is not working with iOS16. I have configured the app attest and its been working for more than a year, it's still working with older iOS versions but not iOS 16. This is the code that I initialise app…
Onix
  • 2,129
  • 2
  • 17
  • 26
0
votes
0 answers

Firebase App Check not working (PERMISSION DENIED) in Flutter

I set up Firebase AppCheck in my Flutter App. I added await Firebase.initializeApp( options: DefaultFirebaseOptions.currentPlatform, ); await FirebaseAppCheck.instance.activate(); in my main.dart code, and I added the Play Console Play…
faccio
  • 652
  • 3
  • 16
0
votes
1 answer

How to restrict access to my Next.js APIs for my application

I am building a Next.js application in which I want to restrict access to my APIs. I only want my application to make those requests. I once built an app with MERN stack, and I remember I used cors to only allow my domain to make requests to my…
user19910212
1 2 3
…
20 21