My AppCheck debug token is statically set, and was added to my account under "Manage debug tokens" for my webapp:
Both reCAPTCHA and reCAPTCHA Enterprise are enabled.
My code is as follows:
On main.dart:
await Firebase.initializeApp(options: options);
await FirebaseAppCheck.instance.activate(
webProvider: ReCaptchaV3Provider(reCaptchaSiteKey));
On index.html, in the <head>:
<script>self.FIREBASE_APPCHECK_DEBUG_TOKEN = "xxx-xxx-xxx";</script>
When the app initializes it says:
App Check debug token: xxx-xxx-xxx. You will need to add it to your app's App Check settings in the Firebase console for it to work.
Indicating that the SDK correctly read the debug token.
However, when I try to do any firebase / firestore operation, or even get the token using FirebaseAppCheck.instance.getToken(), it shows a 403 error in the console:
[app-check/fetch-status-error] AppCheck: Fetch server returned an HTTP error status. HTTP status: 403.
Theoretically, everything is set up correctly - with the static token recognized and the token set in the Firebase console. It is happening for two weeks - longer than propagation time, I've attempted switching between reCAPTCHA and Enterprise (not that I think it matters) both on Google's console and in local code, and running latest firebase_app_check @ 0.3.2+3.
What did I do to deserve this?
My AppCheck debug token is statically set, and was added to my account under "Manage debug tokens" for my webapp:
Both reCAPTCHA and reCAPTCHA Enterprise are enabled.
My code is as follows:
On main.dart:
await Firebase.initializeApp(options: options);
await FirebaseAppCheck.instance.activate(
webProvider: ReCaptchaV3Provider(reCaptchaSiteKey));
On index.html, in the <head>:
<script>self.FIREBASE_APPCHECK_DEBUG_TOKEN = "xxx-xxx-xxx";</script>
When the app initializes it says:
App Check debug token: xxx-xxx-xxx. You will need to add it to your app's App Check settings in the Firebase console for it to work.
Indicating that the SDK correctly read the debug token.
However, when I try to do any firebase / firestore operation, or even get the token using FirebaseAppCheck.instance.getToken(), it shows a 403 error in the console:
[app-check/fetch-status-error] AppCheck: Fetch server returned an HTTP error status. HTTP status: 403.
Theoretically, everything is set up correctly - with the static token recognized and the token set in the Firebase console. It is happening for two weeks - longer than propagation time, I've attempted switching between reCAPTCHA and Enterprise (not that I think it matters) both on Google's console and in local code, and running latest firebase_app_check @ 0.3.2+3.
What did I do to deserve this?
Share Improve this question edited Feb 26 at 13:47 Doug Stevenson 318k36 gold badges456 silver badges473 bronze badges Recognized by Google Cloud Collective asked Feb 26 at 10:07 BharelBharel 27.1k7 gold badges49 silver badges96 bronze badges2 Answers
Reset to default 2According to official Firebase support, this is a bug in the Flutter SDK.
A fix should be uploaded in the upcoming release.
Check the firebase documentation for app check on flutter web.
In index.html, ensure the script is set to true instead of a string
<script>
self.FIREBASE_APPCHECK_DEBUG_TOKEN = true;
</script>
In main.dart, when activating, recaptcha site key can be any string when in debug, I just set it to "recaptcha-site-key".
The token then generate should be added to manage debug tokens on firebase console.
This worked for me.