[firebase_app_check]: Firebase App Check is failing on Xiaomi devices

[hasankarli]

Is there an existing issue for this?

• I have searched the existing issues.

Which plugins are affected?

App Check

Which platforms are affected?

Android

Description

Expected Behavior:
The FirebaseAppCheck.instance.activate() method should successfully activate App Check, and getToken() should return a valid token.

Actual Behavior:
The code fails to activate App Check or retrieve a valid token on Xiaomi devices, resulting in an error.

Error Details:
[firebase_app_check/unknown] ha.k: Error returned from API. code: 403 body: App attestation failed.

Additional Details:
Android and iOS works only xiaomi devices not working

Device:
Device: Xiaomi (Redmi Note 12S)
Android version: Android 13

Reproducing the issue

void main() async {
  WidgetsFlutterBinding.ensureInitialized();
  await Firebase.initializeApp();
  
  try {
    await FirebaseAppCheck.instance.activate(
      androidProvider: kDebugMode
          ? AndroidProvider.debug
          : AndroidProvider.playIntegrity,
      appleProvider: kDebugMode
          ? AppleProvider.debug
          : AppleProvider.appAttestWithDeviceCheckFallback,
    );
    final token = await FirebaseAppCheck.instance.getToken(true);
    print('App Check Token: $token');
  } catch (e) {
    print('Error: $e');
  }
  
  runApp(MyApp());
}

Firebase Core version

3.9.0

Flutter Version

3.24.0

Relevant Log Output

Flutter dependencies

Expand Flutter dependencies snippet

Replace this line with the contents of your `flutter pub deps -- --style=compact`.

Additional context and comments

The error seen in production environment

[russellwheatley]

@hasankarli - does it work for other devices? If so, then this isn't going to be an issue with the SDK but rather something potentially with the device. e.g. Does not have Google Play services installed (necessary for play integrity provider).

Is it also failing on debug as well as production? or both?

Here's an interesting article on Xiaomi: https://xiaomitime.com/can-xiaomi-phones-use-google-play-debunking-the-myth-3687/

[hasankarli]

Yes, it works fine on other devices like Samsung. The issue seems to be specific to certain devices. I found a solution by enabling this flag in the Play Integrity API settings:
✅ Meets basic device integrity

After enabling this, the Play Integrity check started working properly. It seems like some devices, especially those with modified ROMs or missing Google Play services, might fail the integrity check unless this flag is set.

Reference: https://stackoverflow.com/questions/78171576/firebase-appcheck-error-403-app-attestation-failed