🚀 [firebase_app_check] Support passing debugToken as parameter similar to React Native App Check library #11719
Description
What feature would you like to see?
In the React Native package for Firebase App Check, they created their own custom provider that essentially overrides the debug provider token. This allows a developer to specify a static, generated debug token in their code to use.
This is very convenient because, in the case where the developer must uninstall / reinstall the app, they can use the same debug token. Currently, a Flutter developer that installs a new version of the app must manually copy and paste the debug token from XCode / Logcat console output into their Firebase web console (and delete the old token), which becomes tedious when testing certain functionality that requires fresh installations of the application.
Relevant links & code:
- https://rnfirebase.io/app-check/usage#configure-a-custom-provider
- https://github.com/invertase/react-native-firebase/blob/2d8ac144a14e79ce1846ecab077f8d7b69d11f05/packages/app-check/android/src/main/java/io/invertase/firebase/appcheck/ReactNativeFirebaseAppCheckProvider.java#L36
- https://github.com/invertase/react-native-firebase/blob/2d8ac144a14e79ce1846ecab077f8d7b69d11f05/packages/app-check/ios/RNFBAppCheck/RNFBAppCheckProvider.m#L40
Metadata
Metadata
Assignees
Type
Projects
Milestone
Relationships
Participants
Activity
thedalelakes commentedon Oct 25, 2023
I'm willing to complete this issue myself and submit a PR for it. I just want to first make sure that this feature would actually be accepted by the Firebase / FlutterFire core maintainers, given the security implications.
xVemu commentedon Mar 25, 2024
It's also useful for tests in CI.
josh-burton commentedon Apr 11, 2024
We really need this for debug tokens to be useful and maintainable. We're generating and updating our debug tokens via Terraform, but currently we can't use these in the Flutter apps as there is no method to supply our own token.
@thedalelakes did you ever get to work on a PR for this?
thedalelakes commentedon Apr 18, 2024
@josh-burton unfortunately I don't have the time to work on this at the moment. I ended up just turning off App Check enforcement in my dev environment.
xVemu commentedon Apr 19, 2024
I think on IOS you can use point 4 from guideline
furkankurt commentedon Jan 10, 2025
Since the PR (#13101) hasn't maintenance for a long time, I've created a PR (#16942) to support debug tokens. It works on iOS and Android platforms. Please feel free to go ahead and test it out. I'm waiting for the team to review it.