AppCheck

[Robin Tremblay]

I find nothing in the documentation so I try here. I integrate AppCheck for a flutter application, the fact of integrating AppCheck for iOS and Android, do I have to do it for functions that are called by trigger (onDocumentDeleted, onObjectFinalized) at the same time, or is it not necessary for this type of Functions

Thanks for the experts and your help!

[Nohe]

App Check would protect your interactions with Firestore and Firebase Storage (client to backend interactions).

Those functions onDocumentDeleted and onObjectFinalized are privileged functions that respond to events being emitted by Firestore and Storage (backend to backend interactions).

You only need to be concerned with adding app check to functions that are invoked directly by the end user.

Hope this helps!

-Nohe

[Robin Tremblay]

Hello Nohé,

Thank you very much this helps me a lot, so if I understand correctly?

the potential calls onCall, onRequest, If I make calls from my flutter client application, these functions will have to include modifications to support AppCheck and be deployed again.

:-)

--
You received this message because you are subscribed to the Google Groups "Firebase Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firebase-tal...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/47200a00-f1d6-4dfa-ad63-7a54ecfd53ecn%40googlegroups.com.

[Nohe]

Correct. If you are looking to protect function calls, those would be the two Firebase functions to protect.

onCall functions are protected through a configuration setting whereas onRequest functions would require you to extract a header value and pass that header in on the client making calls to your functions.

Hope this helps!

-Nohe

[Robin Tremblay]

Thank you for your quick replies, These reassured me about the precise functions that I should modify. Kind regards