Stack Overflow
Stack Overflow

Questions tagged [firebase-app-check]

App Check works alongside other Firebase services to help protect your backend resources from abuse by allowing only your apps to access them.

App Check works alongside other Firebase services to help protect your backend resources from abuse, such as billing fraud or phishing. With App Check, devices running your app will use an app or device attestation provider that attests to one or both of the following:

  • Requests originate from your authentic app
  • Requests originate from an authentic, untampered device

This attestation is attached to every request your app makes to your Firebase backend resources.

App Check has built-in support for using the following three services as attestation providers:

  • DeviceCheck on iOS
  • SafetyNet on Android
  • reCAPTCHA v3 on web apps

If these are insufficient for your needs, you can also implement your own service that uses either a third-party attestation provider or your own attestation techniques.

App Check currently works with the following Firebase products:

  • Realtime Database
  • Cloud Firestore
  • Cloud Storage
  • Cloud Functions (callable functions)

Related tags

315 questions
7
votes
1 answer

How does Firebase App Check using iOS DeviceCheck work?

I recently decided to enable App Check on Firebase for an iOS app I have running for a small <300 user group. For iOS projects Firebase has two options for App Check DeviceCheck and App Attest. I was able to turn DeviceCheck on without problems by…
Jake Derouin
  • 365
  • 2
  • 9
7
votes
5 answers

Firebase cloud functions Appcheck for https.onRequest

As per documentation we can add appcheck as below, exports.yourCallableFunction = functions.https.onCall((data, context) => { // context.app will be undefined if the request doesn't include a valid // App Check token. if (context.app ==…
deepak n
  • 71
  • 2
  • 4
6
votes
1 answer

FireFlutter: Enable App Check in debug mode

Problem App Check works fine in production mode, but in debug mode I get errors: 401: Firebase App Check token is invalid. I tried two things: Generate a debug token using Firebase console. Generate a debug token in the App via inserting …
Dabbel
  • 2,468
  • 1
  • 8
  • 25
6
votes
1 answer

How to make Firebase App Check work when using Angularfire?

I'm trying to make Firebase App Check work but I'm struggling to find a way to do so using Angularfire as there seem to be no docs on it from what I can find. ... import { getFirestore, provideFirestore } from '@angular/fire/firestore'; import {…
Chrillewoodz
  • 27,055
  • 21
  • 92
  • 175
6
votes
2 answers

Firebase AppCheck for Firebase Auth

Firebase Auth provides a REST API to create/delete/edit auth users. As API Keys are not private, anybody can use the API. The endpoint e.g. to create new users is publicly available and can't AFAIK not be disabled. This is in my opinion a bad…
Bob
  • 376
  • 3
  • 18
6
votes
2 answers

How can I install Firebase AppCheck in my Android React Native project?

I have secured my project with Appcheck in Firebase, I have two apps in my firebase project in which one of them is a web app (https://host-bloodhelper.web.app/) and the another is an Android app (React Native app). I am using the…
ShaheerDev
  • 61
  • 3
6
votes
2 answers

How to configure app check for both release and debug on android?

Is it okay to install both app check provider factory? Or should I use only one for debug and other one for release? If yes then how to do it? Code snippet I'm referring to: package pl.matematykagryzie.app import android.os.Bundle import…
Maciej Caputa
  • 1,831
  • 12
  • 20
6
votes
3 answers

App check unwanted enforcement on Firebase callable functions

Without having changed anything in my Firebase callable functions code, but having re-deployed them, now they suddenly start rejecting all function invocations from my app with the error shown below. I would like NOT to use App Check until I am…
thamey
  • 91
  • 4
5
votes
3 answers

Firebase App Check rejecting all requests from Android devices

I set up App Check for iOS and Android on Flutter. iOS devices are working fine and able to access my RT Database and Cloud Functions. However, Android devices are blocked. I used the SHA-256 certificate fingerprint generated on Google Play Console.…
Stewie Griffin
  • 4,690
  • 23
  • 42
5
votes
2 answers

Firebase App check denied all queries for Firestore in Android

Following the tutorial here but when firebase app check is enforced all queries come back as denied W/FirebaseProfileService: GET FAILED WITH com.google.firebase.firestore.FirebaseFirestoreException: PERMISSION_DENIED: Missing or insufficient…
David
  • 150
  • 10
5
votes
1 answer

Firebase AppCheck VS hackers & spammy requests

Although I fully understand the use of AppCheck, I still wonder how it can help against spamming request to an API endpoint. In the scenario of a hacker using OpenBullet or whatever hacker tool to spam thousands of requests per minutes to a specific…
Gigalink
  • 170
  • 8
5
votes
1 answer

ReferenceError: document is not defined - Firebase appcheck with react

I am trying to integrate appcheck into my firebase react, I use typescript web version 9. I added the code below to my functions/src/index.ts My Code for the appcheck integration: const { initializeAppCheck, ReCaptchaV3Provider } =…
Roman
  • 51
  • 2
5
votes
2 answers

Firebase App Check + Cloud functions : Failed to validate AppCheck token

I have recently added Firebase App Check in my Flutter app. I am calling Cloud functions with the https.onCall() method. However i am receiving this error : > {"severity":"WARNING","message":"Failed to validate AppCheck token.…
Tom3652
  • 2,540
  • 3
  • 19
  • 45
4
votes
1 answer

How to setup App Check in dev environment and last next js 13.4 project with app directory and reactfire?

I was unable to use "firebese app check" in a Next.js 13.4 project with the "app" directory in development mode. I tried using ReactFire, but I only encountered errors. The latest version of Next.js is in SSR, so I attempted to use effects to access…
Dimitri Jacquin
  • 41
  • 1
4
votes
2 answers

Enfore app-check for firebase functions in python

I am trying to enforce firebase app-check for my android app. Specifically, I want to restrict access to my firebase cloud functions written in python. I found instructions on how to do this on node.js based firebase cloud functions, but none for…
Nik
  • 1,093
  • 7
  • 26
1
2
3
…
20 21