Skip to content

feat: add Firebase App Check for device attestation#12

Merged
felippemsc merged 4 commits intomainfrom
feat/firebase-check
Feb 5, 2026
Merged

feat: add Firebase App Check for device attestation#12
felippemsc merged 4 commits intomainfrom
feat/firebase-check

Conversation

@felippemsc
Copy link
Contributor

@felippemsc felippemsc commented Feb 5, 2026

Summary

Add Firebase App Check integration for device attestation during registration. The SDK now supports sending attestation tokens, while remaining provider-agnostic.

Changes

Phase 1A - Apple Setup:

  • Update Bundle ID to io.signedshot.capture
  • Add App Attest capability and entitlements

Phase 1B - Firebase Setup:

  • Add Firebase SDK dependency (FirebaseAppCheck)
  • Initialize Firebase and App Check on app launch
  • Configure AppAttestProvider (devices) / AppCheckDebugProvider (simulator)
  • Add GoogleService-Info.plist to .gitignore

Phase 1D - Attestation Token Support:

  • SDK: Add attestationToken parameter to registerDevice()
  • SDK: Send X-Attestation-Token header when token provided
  • App: Get Firebase App Check token before registration
  • App: Add reset device functionality (long press shield icon)
  • App: Replace print statements with os.log Logger

Notes

  • Currently using Debug Provider due to App Attest 403 issue (to be resolved before App Store release)
  • End-to-end flow tested and working with Debug Provider

Test plan

  • Build succeeds on simulator and device
  • Device registration works with Debug Provider token
  • Backend verifies token and returns method: app_check in JWT
  • Sidecar validation shows correct attestation info

- Change Bundle ID from io.signedshot.sdk.ExampleApp to io.signedshot.capture
- Add App Attest capability for Firebase App Check support
- Add Firebase SDK dependency (FirebaseAppCheck)
- Initialize Firebase and App Check on app launch
- Use AppAttestProvider for real devices
- Use AppCheckDebugProvider for simulator
- Add GoogleService-Info.plist to gitignore
@felippemsc felippemsc changed the title Feat/firebase check feat: add Firebase App Check for device attestation Feb 5, 2026
@felippemsc felippemsc marked this pull request as ready for review February 5, 2026 19:46
@felippemsc felippemsc merged commit 7f432b0 into main Feb 5, 2026
2 checks passed
@felippemsc felippemsc deleted the feat/firebase-check branch February 5, 2026 19:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant