Questions tagged [firebase-app-check]

App Check works alongside other Firebase services to help protect your backend resources from abuse by allowing only your apps to access them.

App Check works alongside other Firebase services to help protect your backend resources from abuse, such as billing fraud or phishing. With App Check, devices running your app will use an app or device attestation provider that attests to one or both of the following:

  • Requests originate from your authentic app
  • Requests originate from an authentic, untampered device

This attestation is attached to every request your app makes to your Firebase backend resources.

App Check has built-in support for using the following three services as attestation providers:

  • DeviceCheck on iOS
  • SafetyNet on Android
  • reCAPTCHA v3 on web apps

If these are insufficient for your needs, you can also implement your own service that uses either a third-party attestation provider or your own attestation techniques.

App Check currently works with the following Firebase products:

  • Realtime Database
  • Cloud Firestore
  • Cloud Storage
  • Cloud Functions (callable functions)

Related tags

315 questions
0
votes
2 answers

Firebase app check on iOS get crash on build

Every think were working very well until I added package firebase_app_check: ^0.0.3 The app gets crashes on the building project to run on iOS, on Android it works very well. Andoird app can connect to firebase but, iOS cant do that becouse the…
0
votes
1 answer

firebase appCheck is not a function

I'm trying to integrate firebase appCheck into my react application. Here is the ERROR code: And this is my code: How to get rid of this error ? Thanks in adavnce.
0
votes
1 answer

Appcheck verification flutter firebase android

I saw documentation for flutter firebase Appcheck what do I need to do in release mode with an original certificate? because all it says is for website verification await FirebaseAppCheck.instance.activate(webRecaptchaSiteKey:…
Noobdeveloper
  • 405
  • 2
  • 6
  • 19
0
votes
1 answer

I'm not getting Debug Token when using AppCheck in a web Local development

I decided to include AppCheck to my Project. I'm implementing this in a web-app with Quasar V2. Quasar offers me some environment variables depending on I'm in development, production or debugging (It's like production but with a --debug flag). I…
Lucas David Ferrero
  • 1,630
  • 14
  • 40
0
votes
2 answers

When is the appCheck.onTokenChanged callback invoked?

I am using appcheck in my web project and setting it up like so: const appCheck = firebase.appCheck(); appCheck.activate( "my site key", true); appCheck.onTokenChanged((token) => { console.log("Token:", token); }); Am I correct to assume that if…
jeremyhare
  • 173
  • 1
  • 6
0
votes
0 answers

How to register for reCAPTCHA v3 site key for mobile app?

Future main() async { WidgetsFlutterBinding.ensureInitialized(); await Firebase.initializeApp(); await FirebaseAppCheck.instance.activate(webRecaptchaSiteKey: 'recaptcha-v3-site-key'); runApp(App()); } I'm trying to upload a photo…
0
votes
1 answer

Firebase API key restrictions

I am struggling to set up my SHA-1 key correctly and restrict the api key on android. I have followed the steps to set up app-check using the SHA-256 key which works fine. I have then added my SHA-1 key to my andriod api key on the GCP credentials…
ebg11
  • 906
  • 1
  • 12
  • 33
0
votes
1 answer

How to perform app check with Pyrebase using Python?

I cannot find the appropriate method to call for firebase.appCheck() equivalent in Pyrebase library.
Tim
  • 73
  • 12
0
votes
1 answer

Can someone access my Firebase database if he/she does not have the URL?

Firebase is a wonderful backend service with strong security rules. In I/O 2021, they also introduced Firebase App Check that adds an additional layer of security. But even if I set the read/write permissions as true and do not enforce app check,…
user16164526
0
votes
1 answer

Which data should I hide to prevent unwanted access to my firebase database?

Firebase provides strong security rules and recently they have introduced Firebase App Check at I/O 2021. All these are good security measures. But even if I do not enforce App Check and write the rules as: ".read": true ".write": true Which…
user16164526
0
votes
1 answer

Firebase AppCheck failed to install using NativeScript

I am trying the install pod 'FirebaseAppCheck', '8.0.0-beta' in the Podfile of my NativeScript project using target iOS 14.4. However, it gives an error below [!] CocoaPods could not find compatible versions for pod "FirebaseAppCheck": In…
Cupid Chan
  • 496
  • 4
  • 15
-1
votes
1 answer

The method 'getInstance' isn't defined for the type 'FirebaseAppCheck'

I am trying to use firebase new feature which is App check. I am following the instructions from their documentation app check. For this line FirebaseAppCheck firebaseAppCheck = FirebaseAppCheck.getInstance(); The method getInstance isn't defined…
ryan chandra
  • 321
  • 3
  • 11
-2
votes
2 answers

firebase_storage/unauthenticated User is unauthenticated. Authenticate and try again error even in the release build

I'm using firebase_storage and firebase_app_check. I get the error in the following code. await FirebaseAuth.instance.signInWithEmailAndPassword(email: 'foo@bar.com', password:…
iDecode
  • 22,623
  • 19
  • 99
  • 186
1 2 3
20
21