Automate Google Firebase App Check
HumDay reads Google Firebase App Check’s own published API description and derives 24 operations from it. Describe the outcome you want in plain words — you get a program that is written, proven on real data, and run for you.
What Google Firebase App Check is
Firebase App Check works alongside other Firebase services to help protect your backend resources from abuse, such as billing fraud or phishing.
API host: firebaseappcheck.googleapis.com
What HumDay can do in Google Firebase App Check
15 documented operations change something in Google Firebase App Check.
- POSTCreates a new DebugToken for the specified app.
/v1/{parent}/debugTokens - DELETEDeletes the specified DebugToken.
/v1/{name} - PATCHUpdates the specified Service configuration.
/v1/{name} - POSTValidates a SafetyNet token.
/v1/{app}:exchangeSafetyNetToken - POSTAccepts a devicetoken issued by DeviceCheck, and attempts to validate it with Apple.
/v1/{app}:exchangeDeviceCheckToken - POSTValidates a reCAPTCHA v3 response token.
/v1/{app}:exchangeRecaptchaV3Token - POSTAccepts an App Attest assertion and an artifact previously obtained from ExchangeAppAttestAttestation and verifies those with Apple.
/v1/{app}:exchangeAppAttestAssertion - POSTValidates an integrity verdict response token from Play Integrity.
/v1/{app}:exchangePlayIntegrityToken - POSTGenerates a challenge that protects the integrity of an immediately following call to ExchangeAppAttestAttestation or ExchangeAppAttestAssertion.
/v1/{app}:generateAppAttestChallenge - POSTAccepts an App Attest CBOR attestation and verifies it with Apple using your preconfigured team and bundle IDs.
/v1/{app}:exchangeAppAttestAttestation - POSTGenerates a challenge that protects the integrity of an immediately following integrity verdict request to the Play Integrity API.
/v1/{app}:generatePlayIntegrityChallenge - POSTValidates a reCAPTCHA Enterprise response token.
/v1/{app}:exchangeRecaptchaEnterpriseToken - POSTAtomically updates the specified Service configurations.
/v1/{parent}/services:batchUpdate - POSTValidates a debug token secret that you have previously created using CreateDebugToken.
/v1/{app}:exchangeDebugToken - POSTValidates a custom token signed using your project's Admin SDK service account credentials.
/v1/{app}:exchangeCustomToken
What HumDay can read from Google Firebase App Check
These are the operations a schedule or a trigger can watch.
- GETGets the Service configuration for the specified service name.
/v1/{name} - GETLists all Service configurations for the specified project.
/v1/{parent}/services - GETAtomically gets the AppAttestConfigs for the specified list of apps.
/v1/{parent}/apps/-/appAttestConfig:batchGet - GETAtomically gets the SafetyNetConfigs for the specified list of apps.
/v1/{parent}/apps/-/safetyNetConfig:batchGet - GETLists all DebugTokens for the specified app.
/v1/{parent}/debugTokens - GETAtomically gets the DeviceCheckConfigs for the specified list of apps.
/v1/{parent}/apps/-/deviceCheckConfig:batchGet - GETAtomically gets the RecaptchaV3Configs for the specified list of apps.
/v1/{parent}/apps/-/recaptchaV3Config:batchGet - GETAtomically gets the PlayIntegrityConfigs for the specified list of apps.
/v1/{parent}/apps/-/playIntegrityConfig:batchGet - GETAtomically gets the RecaptchaEnterpriseConfigs for the specified list of apps.
/v1/{parent}/apps/-/recaptchaEnterpriseConfig:batchGet
How automating Google Firebase App Check works
- Describe the outcome. Say what you want to happen, in your own words. No node graphs, no field mapping.
- Approve the contract. HumDay writes down exactly what it will do, what it will touch, and what it will never do. You approve it before anything is built.
- See it proven. The program runs and shows you the result before it is allowed near your live Google Firebase App Check account.
- Grant access, then go live. You approve the specific Google Firebase App Check operations it may use — and only those.
Automate Google Firebase App Check with these
- Gmail79 operations
- Google+9 operations
- Google Abusive Experience Report2 operations
- Google Accelerated Mobile Pages (AMP) URL1 operations
- Google Access Approval7 operations
- Google Access Context Manager9 operations
- Google ACME DNS2 operations
- Google Ad Exchange Buyer38 operations
- Google Ad Exchange Buyer II50 operations
- Google Ad Experience Report2 operations
- Google Admin SDK122 operations
- Google AdMob7 operations
Categories
Questions about Google Firebase App Check automation
- Can HumDay connect to Google Firebase App Check?
- Yes. HumDay reads Google Firebase App Check's own published API description and derives the operations from it, so there is no hand-built connector to wait for. 24 operations are documented.
- Do I need to write code to automate Google Firebase App Check?
- No. You describe the outcome you want in plain words. HumDay agrees a contract with you, writes the program, and shows you a test run before anything touches your Google Firebase App Check account.
- What can HumDay do in Google Firebase App Check?
- 15 of the 24 documented operations change something in Google Firebase App Check, and 9 read from it. HumDay only ever uses the specific operations your approved contract needs.
- Is my Google Firebase App Check account safe?
- Your credentials are stored encrypted and are never shown in chat, code, or logs. Every run is limited to the operations you explicitly approved, and anything that writes to Google Firebase App Check is held behind that approval.
Where this came from
The operations above are read from a published API description for Google Firebase App Check at firebaseappcheck.googleapis.com/$discovery/rest?version=v1. Descriptions are the provider’s own words, not ours. Last published 2023-02-17.