Questions tagged [firebase-app-check]

App Check works alongside other Firebase services to help protect your backend resources from abuse by allowing only your apps to access them.

App Check works alongside other Firebase services to help protect your backend resources from abuse, such as billing fraud or phishing. With App Check, devices running your app will use an app or device attestation provider that attests to one or both of the following:

  • Requests originate from your authentic app
  • Requests originate from an authentic, untampered device

This attestation is attached to every request your app makes to your Firebase backend resources.

App Check has built-in support for using the following three services as attestation providers:

  • DeviceCheck on iOS
  • SafetyNet on Android
  • reCAPTCHA v3 on web apps

If these are insufficient for your needs, you can also implement your own service that uses either a third-party attestation provider or your own attestation techniques.

App Check currently works with the following Firebase products:

  • Realtime Database
  • Cloud Firestore
  • Cloud Storage
  • Cloud Functions (callable functions)

Related tags

315 questions
2
votes
0 answers

Firebase Admin SDK and AppCheck

I am using Java admins SDK to connect my firebase + I am using App check. When I try to read or write data using admin SDK the action fail, because of App check. so my question is how to check admin SDK? FirebaseOptions options = new…
MehdiS
  • 89
  • 5
2
votes
1 answer

FirebaseError: AppCheck: Fetch server returned an HTTP error status. HTTP status: 403. (appCheck/fetch-status-error)

I try to use Firebase Appcheck and Emulator together during development process. I thought that Appcheck can work when deployment completed but it doesn't work after deployment too. However,debug console return below error when It try to upload a…
isa
  • 398
  • 1
  • 3
  • 13
2
votes
1 answer

How to use firebase App Check in a react.js web application?

So far I have declared the constant appCheck, as explained in the docs. It looks like this: const appCheck = initializeAppCheck(app, { provider: new ReCaptchaV3Provider(siteKey // the recaptcha site key provided by google), …
2
votes
1 answer

How do I debug/handle Firebase App Check Invalid Requests?

I've integrated (but not enforced) App Check within an iOS app of mine, and have a number of requests that are apparently invalid - that is, the requests have an invalid App Check token. I am using Apple's App Attest as the Attestation Provider. The…
vyadav
  • 51
  • 1
2
votes
2 answers

Failing to get debug app check token for iOS

I'm closely following app check documentation in order to use debug token, however instead of seeing it logged out in the console I see following error (when running in debug simulator from xcode) EDIT: Everything works as expected in testflight /…
Ilja
  • 44,142
  • 92
  • 275
  • 498
2
votes
0 answers

Understanding Firebase App Check rejection

My project use Firebase App check on iOS using DeviceCheck & App Test, cloud functions have enforcement checking wether auth context.app is undefined or not, simply like: if (appCheckEnabled == true && appCheckFunctions[functionName] == true) { …
2
votes
0 answers

Flutter: App not authorised to use firebase + safety_net_token issues despite correct SHA-1/SHA-256 key

I am running a RELEASE build on my Android phone. The debug version works fine. I am using AppCheck as well. I get the following error when authenticating the phone number: I have followed the AppCheck tutorial here. I have not done any steps for…
Damandroid
  • 756
  • 9
  • 31
2
votes
0 answers

Automatically redirect URLs generated by Vercel's production deployments to custom domains

If you are deploying to Vercel for production and you have set up a custom domain, you can access the same page from the following three URLs. 1. https://[vercelProjectName]-[vercelUserName].vercel.app 2.…
C.V.Alkan
  • 79
  • 1
  • 7
2
votes
3 answers

Sudden error (403-Forbidden) on Firestore calls

I have this simple code using Firestore-PHP
MujtabaFR
  • 5,956
  • 6
  • 40
  • 66
2
votes
1 answer

Angular with Firebase - missing or insufficient permissions after app check

I use angularfire to interact with firestore in my angular app. Unfortunately, after I setup app check in the firebase console, I'm getting ERROR FirebaseError: Missing or insufficient permissions. in the console of my webbrowser after the first…
2
votes
1 answer

App Check for Expo/React Native app using Firebase JS SDK

My Expo based React Native app worked perfectly fine until I added Firebase App Check. I am using Firebase JS SDK and not React Native Firebase because it is suggested here for cross platform development. Now how can I get and then send context.auth…
Umair A.
  • 6,690
  • 20
  • 83
  • 130
2
votes
0 answers

Firebase App Check not working properly (Decoding App Check token failed)

I recently integrated Firebase App Check in my app and enforced it for calling Cloud Functions. The problem is that everything works fine on my OnePlus 8T whereas the calls to cloud function fails on all other devices. I am installing the app from…
Mehul Kanzariya
  • 888
  • 3
  • 27
  • 58
2
votes
0 answers

FIREBASE WARNING: Missing appcheck token (https://xxxxxxxx.firebaseio.com/)

I was using my own firebase account while development of application and later I used client's firebase config/project and now my app is showing this warning in browser console. I am not able to read and write the firebase database. How can I…
2
votes
1 answer

Cannot find App Attest Capability in XCode

According to the App Check Firebase Documentation, it is said to add the App Attest capability to your app. However, I am not able to find any such capability in XCode. Any insights on this? Note: We have enabled capability in the provision…
Prakruth N
  • 21
  • 3
2
votes
2 answers

Firebase AppCheck gives 'appCheck is not a function' when using the client SDK

I'm getting an error when I initialize the AppCheck in my project. Firebase version: "^8.8.1". Here is my configuration file: import firebase from "firebase/app"; import "firebase/functions"; const firebaseConfig = { apiKey: "--", …
Lucas David Ferrero
  • 1,630
  • 14
  • 40