httpsCallable expect app check token although api was not enabled

[nes123]

after the last update ("@react-native-firebase/functions": "21.13.0") i get an error only when Android app calling a firebase function. The error in the server side:

Failed to validate AppCheck token. FirebaseAppCheckError: Decoding App Check token failed. Make sure you passed the entire string JWT which represents the Firebase App Check token.
at FirebaseAppCheckError.FirebaseError

Error is not expected as app check is disabled in my project.

[MichaelVerdon]

Hello there, can you please provide more information such as the logs and maybe a snippet?

[nes123]

Hello there, can you please provide more information such as the logs and maybe a snippet?

Here are some more details. My firebase function looks like that:

exports.myFunction = functions.https.onCall(async (data, context) => {});

i didnt include:

.runWith({
enforceAppCheck: true, // Reject requests with missing or invalid App Check tokens.
})

When i call it from the react native app:

Firebase.functions
.httpsCallable("myFunction")

when calling using react-native-firebase 21.10.0 everything works fine for both ios and android

after upgrading to 21.13.0 it still works well for ios, but when calling the function from android device i get on the server side:

Failed to validate AppCheck token. FirebaseAppCheckError: Decoding App Check token failed. Make sure you passed the entire string JWT which represents the Firebase App Check token.
at FirebaseAppCheckError.FirebaseError [as constructor] (/layers/google.nodejs.yarn/yarn_modules/node_modules/firebase-admin/lib/utils/error.js:44:28)
at FirebaseAppCheckError.PrefixedFirebaseError [as constructor] (/layers/google.nodejs.yarn/yarn_modules/node_modules/firebase-admin/lib/utils/error.js:90:28)
at new FirebaseAppCheckError (/layers/google.nodejs.yarn/yarn_modules/node_modules/firebase-admin/lib/app-check/app-check-api-client-internal.js:187:28)
at /layers/google.nodejs.yarn/yarn_modules/node_modules/firebase-admin/lib/app-check/token-verifier.js:81:19
at processTicksAndRejections (internal/process/task_queues.js:95:5) {
errorInfo: {
code: 'app-check/invalid-argument',
message: 'Decoding App Check token failed. Make sure you passed the entire string JWT which represents the Firebase App Check token.'
},
codePrefix: 'app-check'
}

[MichaelVerdon]

Hi there, thank you for the information. What version were you using before you updated? What I am wondering is if you were using a React Native Firebase version that wrapped around an earlier version of the Native SDKs. App-Check was not changed here in the last update and I assume you are calling app check related functions with your firebase functions? I would also like to ask for more details about what your function is doing and what method it is calling?

[nes123]

Hi there, thank you for the information. What version were you using before you updated? What I am wondering is if you were using a React Native Firebase version that wrapped around an earlier version of the Native SDKs. App-Check was not changed here in the last update and I assume you are calling app check related functions with your firebase functions? I would also like to ask for more details about what your function is doing and what method it is calling?

I was using 21.10.0 before. I dont do anything related to app check in the client nor in the server side. I assume that after upgrade the client is sending an empty token and the firebase admin is trying to authenticate it. Maybe it is related to a change they did in the android SDK.

I just noticed that i get this warning when my app starts:

Error getting App Check token; using placeholder token instead. Error: com.google.firebase.FirebaseException: No AppCheckProvider installed.

[nes123]

i updated the firebase-admin and firebase-functions and re-deployed the function and it seems to solve the problem..but i still get many warnings about No AppCheckProvider installed

[MichaelVerdon]

Hey there @nes123 glad to hear this fixed your issue, it must have been version incompatibility until you upgraded your admin. What warning do you get? Depending on what it is it could be safe to ignore.