Firebase App-Check Not Enforcing After App Registered and Service is being used

[Stefan Balta]

Hi all! I have been having issues enabling app-check enforcement for Firebase RTDB. I have already added app-check into my web client and have closely deconstructed all the network activity of my app and saw that recaptcha token is being generated, exchanged to the app-check rest-api and an app-check token is recieved. (all calls are made by the 9th version of the firebase js sdk) My app is registered with RecaptchaV3. I have data which is populated in firebase RTDB and have also looked into the network communications from my app to the database and found that the app-check token is also being passed in then. The issue comes in when I go to the app-check page in the firebase console, it tells me that I need to start using Realtime Database to enable app-check. I am unsure how to address this issue as I have read all the documentation available and seen numerous youtube videos uploaded by Firebase in an attemp to address this issue, however there is no mention of this issue anywhere. Any help is appreciated!

More Information can be provided if needed,

Stefan Balta

[Arthur Thompson]

Hi Stefan,

Just to be clear you are able to use app-check and RTDB but the console is incorrectly asking you to "start using Realtime Database to enable app-check"?

--
You received this message because you are subscribed to the Google Groups "Firebase Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firebase-tal...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/f3b62aa6-2479-4c74-9d66-353369517581n%40googlegroups.com.

[Stefan Balta]

Hi Arthur,

Yes that is correct! Firebase app-check is fully working on my client, and rtdb is fully working with my client, but it is simply not being enforced and incorrectly asking me to "start using Realtime Database to enable app-check". I confirmed that it is not being enforced by sending a manual request to the rest api for the rtdb service without an app-check token included.

Stefan Balta