feat(appcheck): implement RecaptchaEnterpriseProvider and tests

.github/workflows/_spm.yml

@@ -58,6 +58,14 @@ on:
         required: false
         default: false
 
+      # Custom environment variables to inject into the jobs.
+      # Expected to be a JSON-formatted string.
+      # Example: '{"FIREBASE_APP_CHECK_BRANCH": "nc/target-split"}'
+      env_vars:
+        type: string
+        required: false
+        default: "{}"
+
     outputs:
       cache_key:
         description: "The cache key for the Swift package resolution."
@@ -72,6 +80,24 @@ jobs:
       cache_key: ${{ steps.generate_cache_key.outputs.cache_key }}
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+      - name: Set Custom Environment Variables
+        run: |
+          python3 -c '
+          import os, json
+          try:
+              env_vars = json.loads(os.environ.get("CUSTOM_ENV_VARS", "{}"))
+              if not isinstance(env_vars, dict):
+                  raise ValueError("env_vars must be a JSON object")
+              with open(os.environ["GITHUB_ENV"], "a") as f:
+                  for k, v in env_vars.items():
+                      f.write(f"{k}={v}\n")
+          except json.JSONDecodeError:
+              print("Warning: env_vars is not valid JSON. Skipping.")
+          except Exception as e:
+              print(f"Error setting env vars: {e}")
+          '
+        env:
+          CUSTOM_ENV_VARS: ${{ inputs.env_vars }}
       - name: Xcode
         run: sudo xcode-select -s /Applications/Xcode_26.4.app/Contents/Developer
       - name: Generate Swift Package.resolved
@@ -110,6 +136,24 @@ jobs:
     - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       with:
         persist-credentials: false
+    - name: Set Custom Environment Variables
+      run: |
+        python3 -c '
+        import os, json
+        try:
+            env_vars = json.loads(os.environ.get("CUSTOM_ENV_VARS", "{}"))
+            if not isinstance(env_vars, dict):
+                raise ValueError("env_vars must be a JSON object")
+            with open(os.environ["GITHUB_ENV"], "a") as f:
+                for k, v in env_vars.items():
+                    f.write(f"{k}={v}\n")
+        except json.JSONDecodeError:
+            print("Warning: env_vars is not valid JSON. Skipping.")
+        except Exception as e:
+            print(f"Error setting env vars: {e}")
+        '
+      env:
+        CUSTOM_ENV_VARS: ${{ inputs.env_vars }}
     - uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
       with:
         path: .build

.github/workflows/sdk.appcheck.yml

@@ -30,6 +30,8 @@ jobs:
     uses: ./.github/workflows/_spm.yml
     with:
       target: ${{  matrix.target }}
+      env_vars: '{"FIREBASE_APP_CHECK_BRANCH": "nc/target-split"}'
+
 
   catalyst:
     uses: ./.github/workflows/_catalyst.yml

FirebaseAppCheck.podspec

@@ -44,7 +44,7 @@ Pod::Spec.new do |s|
   s.osx.weak_framework = 'DeviceCheck'
   s.tvos.weak_framework = 'DeviceCheck'
 
-  s.dependency 'AppCheckCore', '~> 11.0'
+  s.dependency 'AppCheckCore', '~> 11.3'
   s.dependency 'FirebaseAppCheckInterop', '~> 12.14.0'
   s.dependency 'FirebaseCore', '~> 12.14.0'
   s.dependency 'GoogleUtilities/Environment', '~> 8.1'

FirebaseAppCheck/Apps/FIRAppCheckTestApp/E2E_TESTING.md

@@ -0,0 +1,64 @@
+# E2E Testing with FIRAppCheckTestApp
+
+This document provides information on how to configure and run End-to-End (E2E) tests for App Check providers using this sample app.
+
+## Configurability
+
+The app's behavior can be configured using environment variables passed during test execution.
+
+### Environment Variables
+
+Starting with Xcode 13, you can pass environment variables directly to the test runner by prefixing them with `TEST_RUNNER_`. The prefix is stripped when it reaches the test process.
+
+- **`TEST_RUNNER_RECAPTCHA_SITE_KEY`**: The reCAPTCHA Enterprise site key used by the `RecaptchaEnterpriseProvider`.
+    - **Access in Code**: Read via `ProcessInfo.processInfo.environment["RECAPTCHA_SITE_KEY"]`.
+- **`TEST_RUNNER_APP_CHECK_PROVIDER`**: Specifies which App Check provider factory to use.
+    - **Supported Values**: `recaptcha` (default), `debug`.
+    - **Access in Code**: Read via `ProcessInfo.processInfo.environment["APP_CHECK_PROVIDER"]`.
+
+### Manual Override
+
+For local debugging and manual testing, you can override the environment variables by setting `manualProviderOverride` in `AppDelegate.swift`:
+
+```swift
+let manualProviderOverride: String? = "debug" // Force debug provider
+```
+
+## Running Tests
+
+The commands below should be run from the **repository root**.
+
+### Prerequisites
+- Ensure you have a local checkout of the `app-check` repository if you are developing it locally. Set `FIREBASE_APP_CHECK_LOCAL_PATH` to point to it.
+
+### Sample Commands
+
+#### Run tests with reCAPTCHA Enterprise provider
+
+```bash
+export TEST_RUNNER_RECAPTCHA_SITE_KEY="your_site_key_here"
+export TEST_RUNNER_APP_CHECK_PROVIDER="recaptcha"
+export FIREBASE_APP_CHECK_LOCAL_PATH="/path/to/your/local/app-check"
+
+xcodebuild test \
+  -workspace FirebaseAppCheck/Apps/FIRAppCheckTestApp/FIRAppCheckTestApp.xcworkspace \
+  -scheme FIRAppCheckTestApp \
+  -destination 'platform=iOS Simulator,name=iPhone 16'
+```
+
+#### Run tests with Debug provider
+
+```bash
+export TEST_RUNNER_APP_CHECK_PROVIDER="debug"
+export FIREBASE_APP_CHECK_LOCAL_PATH="/path/to/your/local/app-check"
+
+xcodebuild test \
+  -workspace FirebaseAppCheck/Apps/FIRAppCheckTestApp/FIRAppCheckTestApp.xcworkspace \
+  -scheme FIRAppCheckTestApp \
+  -destination 'platform=iOS Simulator,name=iPhone 16'
+```
+*Note: The Debug provider might require you to register the generated debug token in the Firebase Console for the tests to pass if they interact with live services.*
+
+## Project Structure
+
+- **`FIRAppCheckTestAppTests`**: A hosted unit test target containing the test cases. It runs inside the app process to have access to the full app context.