Questions tagged [firebase-app-check]

App Check works alongside other Firebase services to help protect your backend resources from abuse by allowing only your apps to access them.

App Check works alongside other Firebase services to help protect your backend resources from abuse, such as billing fraud or phishing. With App Check, devices running your app will use an app or device attestation provider that attests to one or both of the following:

  • Requests originate from your authentic app
  • Requests originate from an authentic, untampered device

This attestation is attached to every request your app makes to your Firebase backend resources.

App Check has built-in support for using the following three services as attestation providers:

  • DeviceCheck on iOS
  • SafetyNet on Android
  • reCAPTCHA v3 on web apps

If these are insufficient for your needs, you can also implement your own service that uses either a third-party attestation provider or your own attestation techniques.

App Check currently works with the following Firebase products:

  • Realtime Database
  • Cloud Firestore
  • Cloud Storage
  • Cloud Functions (callable functions)

Related tags

315 questions
1
vote
0 answers

Firebase user is not able to login

I am making an app for ios where I use firebase to authenticate users. In the app I have App check so it used the apple certificates for the app to work without problems, but it took time to upload it to the apple store so my account has already…
1
vote
1 answer

Firebase app check with Play integrity not returning token giving 403 error GeneratePlayIntegrityChallenge are blocked

I have integrated the firebase app check in my android project and followed all the requisites that are mentioned here. Additional to this I have also added the setUp code val firebaseAppCheck = FirebaseAppCheck.getInstance() val…
1
vote
0 answers

Firebase App Check isnt working on Flutter Android

I was working on a flutter app that was working for both Android and IOS perfectly, including Firebase AppCheck Feature. when I tried to release it to google play, I figured our that my package ID wasn't meeting the standarization. So, I had to…
Mark Nugromentry
  • 195
  • 2
  • 10
1
vote
0 answers

Uncaught Error: Component app-check has not been registered yet [For reactjs]

While developing my react app, I tried to setup appCheck functionality from Firebase. The browser is giving output as shown in the title of the question. My firebase-config.js file is as shown: import { initializeApp } from "firebase/app"; import {…
Prince Khan
  • 19
  • 1
  • 3
1
vote
0 answers

How to setup firebase app check debug tokens for real device while testing across multiple install/uninstall?

We are able to test firebase app check using debug provider on a real device by launching the app on the real device and copy the token from logs then we configure this copied token in firebase console as per the documentation. It has a couple of…
iuq
  • 1,487
  • 1
  • 20
  • 42
1
vote
1 answer

How to handle Firebase Appcheck Debug tokens and providers in flutter

As the docs are not clear about some things, I came to ask you guys here. So, Appcheck has been a big pain for me to implement on flutter for 2 weeks now, and when using the Debug tokens in my app on ios or Android I end up with a lot of unexpected…
AlexFlutter
  • 63
  • 1
  • 6
1
vote
0 answers

Flutter Firebase onCall functions is not validated by App Check even when AppCheck and PlayIntegrity is enabled

I have enabled AppCheck and PlayIntegrity in Firebase. However when I trigger a callable function, 2 things happens here: App Verification is not happening (See the Firebase function log below). The Push notification that I suppose to receive in…
1
vote
1 answer

Firebase AppCheck fails with invalid-argument when using Debug Tokens on a custom backend

I am trying to validate an AppCheck DEBUG token generated following the directions of the documentation here: https://firebase.google.com/docs/app-check/flutter/debug-provider?hl=en&authuser=0 I created a debug token using the "Generate token"…
Jacobo Koenig
  • 11,728
  • 9
  • 40
  • 75
1
vote
0 answers

Error: [appCheck/token-error] com.google.firebase.FirebaseException: Error returned from API. code: 403 body: App attestation failed

I have followed all steps for app-check implementation and it works properly in debug mode but not in production. It fails with the following error: Error: [appCheck/token-error] com.google.firebase.FirebaseException: Error returned from API. code:…
1
vote
1 answer

AppCheck firebase reCaptcha setup issue

I am using this firebase with next.js. I am trying to add AppCheck reCaptcha to config, I follow the documentation and some recommendations, but when I run yarn build Build fails with next error: ReferenceError: document is not defined at…
1
vote
1 answer

Why app-check enforcement is not preventing me to login when app-check fails?

I have enforced app-check and I initialize it in the app but even if I give a wrong key just for testing it, I am still able to login. I have upgraded app-check to a newer version but before it used to work. async getAppCheck() { try { …
1
vote
1 answer

Firebase app check in python AWS lambda not working because of cryptography compilation

I am trying to validate App Check tokens from my AWS lambda in python under the x86_64 architecture. When i execute my AWS lambda, i got the following error : [ERROR] Runtime.ImportModuleError: Unable to import module 'lambda_function':…
1
vote
0 answers

How to implement AppCheck in react native using react-native-firebase library from rnfirebase.io?

I've been trying to remove reCaptcha from firebase phone authentication and the only way nowadays, earlier SafetyNet was another, is to use Play Integriti which supposedly needs AppCheck. I've been stuck on this for some time and would love it if…
1
vote
0 answers

How to obtain "integrity verdicts" from Firebase AppCheck?

I would like to add Firebase AppCheck to my mobile app to protect my backend (not Firebase services). I want to use Google Play Integrity provider (default one). I know that Firebase AppCheck for Android is a wrapper around Google Play Integrity. It…
1
vote
2 answers

Firebase AppCheck POST request is unknown

I'm trying to configure AppCheck in my web app (using SvelteKit). I've registered my web app with recaptcha and then Added this basic code: onMount(async () => { const appCheck = initializeAppCheck(app, { provider: new…
yuvala
  • 31
  • 4