Thanks so much for the amazing work you do guys! I just recently got started with Firebase and I'm so in love. Please keep your videos coming! They are truly valuable and helpful 🙌
What if an attacker gets my own app to send a valid request to firebase with a valid app check token, intercepts it, and repeats the same call a large number of times?
Great question! App Check also works with web apps, where it uses ReCAPTCHAv3 and ReCAPTCHA Enterprise to establish the app identity. Also see: firebase.google.com/docs/app-check/web/recaptcha-provider
With an iOS app, every time, it goes through app store review it gets rejected since the review team uses some test devices that are unable to login with appcheck enabled. We have to disable app check. How can we fix this
I see @Flon Mackenzie question about Web App. Is there a way to implement App Check for a web app and a Python script that writes data to the same database?