Skip to content

[FR]: Add logging to indicate if debugtoken passed via environment variable FIRAAppCheckDebugToken is used #12145

Open
@vhartikainen

Description

@vhartikainen

Description

  1. When configuring AppCheck to use Debug Token from Environment variable FIRAAppCheckDebugToken, indicate that this is in use (currentDebugToken), instead of the generated Debug Token (localDebugToken)
  2. Currently Firebase SDK outputs the localDebugToken, but doesn't indicate whether it is in use or the one passed via environment variable.
  3. Add logging statement to indicate that currentDebugToken is in use. DONT output the token, as that can be seen as security issue, as also commented in the code. See:
    // Print only locally generated token to avoid a valid token leak on CI.
    FIRLogWarning(kFIRLoggerAppCheck, kFIRLoggerAppCheckMessageCodeDebugToken,
    @"Firebase App Check debug token: '%@'.", [provider localDebugToken]);
    return provider;
    }

API Proposal

No response

Firebase Product(s)

App Check

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions