Error Missing Client Identifier when call mfaSign:start on Identity Toolkit API

[Herdi Agustina]

Hi,
Can you help me with this? I got this error when I call the https://identitytoolkit.googleapis.com/v2/accounts/mfaSignIn:start?key=[KEY]

and the error appears when the testing phone numbers not added on Multi Factor Authentication setting.

 

[Andres Fiesco Casasola]

Are you using Firebase Authentication? Did you disable the captcha request (or silent APN request)? If so, Firebase uses it to verify app environment, and you are trying to sign in on a non-white-listed number. 

What documentation are you following to set up the authentication? Can you also post the complete error you are getting, please?

Here is some documentation that you can find useful:

[1]:https://github.com/invertase/react-native-firebase/issues/4505

[2]:https://stackoverflow.com/questions/45917917/missing-client-identifier-while-trying-to-do-phoneauth-in-android

[3]:https://cloud.google.com/identity-platform/docs/test-phone-numbers

[4]:https://cloud.google.com/identity-platform/docs/web/mfa

[Herdi Agustina]

Hi Andres,

Yes, I'm using Firebase Authentication on server side. So, I use the Rest Api of Firebase Authentication. After I do some research, I think the issue is recaptchaStoken from https://identitytoolkit.googleapis.com/v1/recaptchaParams need to verify to get recaptchaToken params for calling the mfaSignIn:start. I found this after to try implementing Firebase Authentication on web (Node.js). I try to verify using  https://www.google.com/recaptcha/api/siteverify but get error invalid_input_response. Any idea for verify the captcha token?

[Osvaldo Lopez Acuña]

According to Admin Authentication API Errors, an invalid argument was provided to an Authentication method. It seems that the response parameter is invalid or malformed according to the Error code reference.

Check Enable Phone Number sign-in for your Firebase project for more information.

You can also check the following SO links to workaround:

1. SO Case about Invalid input response and secret when verifying Google reCaptcha:

https://stackoverflow.com/q/54695089/17544309

2. SO Case about MISSING_CLIENT_IDENTIFIER, while trying to do PhoneAuth in Android:

https://stackoverflow.com/questions/45917917/missing-client-identifier-while-trying-to-do-phoneauth-in-android

3. SO Case about Firebase phone authentication is not working on Android real device:

https://stackoverflow.com/questions/64952016/firebase-phone-authentication-is-not-working-on-android-real-device

I will repost a bigger image of your first post that I took from here.

[Herdi Agustina]

Hi All,
I was fixed this issue with adding google recaptcha on the client side. So, when I send parameters email & password for attempt signInWithPassword, I also include the verified rechaptcha token from google recaptcha for attempt mfaSignIn:start.