Your app interacts with the provider of your choice to obtain an attestation.In your app, the following happens periodically: When you enable App Check for a service and include the client SDK You can also use App Check to protect your non-Firebase backend resources. Service that uses either a third-party attestation provider or your ownĪpp Check currently works with the following Firebase products: Supported Firebase productsĪuthentication (beta requires upgrade to Firebase Authentication with Identity Platform) If these are insufficient for your needs, you can also implement your own
Originating from an app or platform you haven't authorized.Īpp Check has built-in support for using the following services as When you enable App Check enforcement, requests fromĬlients without a valid attestation will be rejected, as will any request This attestation is attached to every request your app makes to the APIs you Requests originate from an authentic, untampered device.Requests originate from your authentic app.With App Check, devices running your app will use an app or deviceĪttestation provider that attests to one or both of the following: It works withīoth Firebase services, Google Cloud services, and your
Unauthorized clients from accessing your backend resources. App Check helps protect your API resources from abuse by preventing
