Firebase App Check (Fraud Protection) on the web

81 views
Skip to first unread message

nw...@cornell.edu

unread,
Jul 27, 2021, 1:09:09 PM7/27/21
to Firebase Google Group
Hello, I'm wondering how Firebase's App Check can prevent against fraud (via endpoint spam) on the web.

Specifically, on the web, with App Check (via reCaptchav3), is there protection from users who spam a particular endpoint. This abuse of course would not be possible through a CURL (from my understanding of how App Check functions), but would it be possible for the perpetrator in this case to instead write some Javascript (that would execute in the page) to spam a particular endpoint?

If so -- are there plans to protect against this or viable solutions to protect against this today?

Thank you!
Reply all
Reply to author
Forward
0 new messages