feat(appcheck): add helpful log for registering debug tokens by ncooke3 · Pull Request #16232 · firebase/firebase-ios-sdk

ncooke3 · Jun 4, 2026

If the debug provider fails to return a valid FAC token, assume the token is unregistered. To assist developers, log a direct link to the Firebase console where they can register the debug token printed at app startup.

As currently implemented, the project ID and app ID will be printed to the console (interpolated into the URL).

Precedent on logging these fields

Firebase Database: Logs the projectID when falling back to the default RTDB host URL:
- Note: FFLog is a macro that redirects to FIRLogDebug.
- firebase-ios-sdk/FirebaseDatabase/Sources/Api/FIRDatabase.m
  
  Lines 74 to 75 in ed8932b
  
  FFLog(@"I-RDB024002", @"Using default host for project %@",
  
  app.options.projectID);
Firebase Remote Config: Logs the full URL request (which contains the projectID in the path) when making a fetch call:

firebase-ios-sdk/FirebaseRemoteConfig/Sources/RCNConfigFetch.m

Lines 668 to 669 in ed8932b

    
           FIRLogDebug(kFIRLoggerRemoteConfig, @"I-RCN000046", @"%@", 
        
                       [NSString stringWithFormat:@"Making config request: %@", [URL absoluteString]]);

Firebase Messaging: Logs the old and new App IDs when invalidating a cached token because the App ID changed:

firebase-ios-sdk/FirebaseMessaging/Sources/Token/FIRMessagingTokenInfo.m

Lines 100 to 103 in ed8932b

    
           FIRMessagingLoggerDebug( 
        
               kFIRMessagingMessageCodeTokenInfoFirebaseAppIDChanged, 
        
               @"Invalidating cached token due to Firebase App IID change from %@ to %@", _firebaseAppID, 
        
               currentFirebaseAppID);

Example (on attesting with unregistered debug token):

<Debug> [AppCheckCore][I-GAC004004] Failed to exchange debug token to app check token: Error Domain=com.google.app_check_core Code=0 "The server responded with an error: 
 - URL: https://firebaseappcheck.googleapis.com/v1/projects/appcheck-testing/apps/<redacted>:exchangeDebugToken 
 - HTTP status code: 403 
 - Response body: {
  "error": {
    "code": 403,
    "message": "App attestation failed.",
    "status": "PERMISSION_DENIED"
  }
}
" UserInfo={NSLocalizedFailureReason=The server responded with an error: 
 - URL: https://firebaseappcheck.googleapis.com/v1/projects/appcheck-testing/apps//<redacted>:exchangeDebugToken 
 - HTTP status code: 403 
 - Response body: {
  "error": {
    "code": 403,
    "message": "App attestation failed.",
    "status": "PERMISSION_DENIED"
  }
}
}
12.15.0 - [FirebaseAppCheck][I-FAA004002] Failed to exchange debug token. If you haven't registered it, you can do so in the Firebase Console: https://firebase.google.com/project/appcheck-testing/appcheck/apps?selectedAppId=<redacted>

The last line from above is from the new log:

12.15.0 - [FirebaseAppCheck][I-FAA004002] Failed to exchange debug token.
If you haven't registered it, you can do so in the Firebase Console:
https://firebase.google.com/project/appcheck-testing/appcheck/apps?selectedAppId=<redacted>

Verified it takes you to the debug token manager for the given app ID.

Tangential docs: cl/923512169

cc: @weixifan @andrewheard @rlazo

gemini-code-assist · Jun 4, 2026

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	`/gemini review`	Performs a code review for the current pull request in its current state.
Pull Request Summary	`/gemini summary`	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	`/gemini help`	Displays a list of available commands.

Customization

To customize the Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counterproductive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

ncooke3 · Jun 4, 2026

Not putting the debug token itself in this new log message to prevent accidental leaks.

feat(appcheck): add helpful log for registering debug tokens

666e8de

danger-firebase-ios Bot added the api: appcheck label Jun 4, 2026

changelog

46e2f2c

ncooke3 commented Jun 4, 2026

View reviewed changes

Comment thread FirebaseAppCheck/Sources/DebugProvider/FIRAppCheckDebugProvider.m Outdated

Apply suggestion from @ncooke3

f6f4014

ncooke3 requested review from andrewheard and paulb777 June 4, 2026 20:12

paulb777 approved these changes Jun 5, 2026

View reviewed changes

ncooke3 merged commit ff92250 into main Jun 5, 2026
88 checks passed

ncooke3 deleted the nc/debug-help-log branch June 5, 2026 00:05

github-actions Bot mentioned this pull request Jun 17, 2026

Update to Firebase 12.15.0 afresh-technologies/firebase-ios-sdk-xcframeworks#110

Merged

leojaygoogle pushed a commit that referenced this pull request Jun 29, 2026

feat(appcheck): add helpful log for registering debug tokens (#16232)

744f5fa

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(appcheck): add helpful log for registering debug tokens#16232

feat(appcheck): add helpful log for registering debug tokens#16232
ncooke3 merged 3 commits into
mainfirebase/firebase-ios-sdk:mainfrom
nc/debug-help-logfirebase/firebase-ios-sdk:nc/debug-help-logCopy head branch name to clipboard

ncooke3 commented Jun 4, 2026 •

edited

Loading

Uh oh!

gemini-code-assist Bot commented Jun 4, 2026

Uh oh!

Uh oh!

ncooke3 commented Jun 4, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

	FFLog(@"I-RDB024002", @"Using default host for project %@",
	app.options.projectID);

	FIRLogDebug(kFIRLoggerRemoteConfig, @"I-RCN000046", @"%@",
	[NSString stringWithFormat:@"Making config request: %@", [URL absoluteString]]);

	FIRMessagingLoggerDebug(
	kFIRMessagingMessageCodeTokenInfoFirebaseAppIDChanged,
	@"Invalidating cached token due to Firebase App IID change from %@ to %@", _firebaseAppID,
	currentFirebaseAppID);

Search code, repositories, users, issues, pull requests...

Uh oh!

Conversation

ncooke3 commented Jun 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

gemini-code-assist Bot commented Jun 4, 2026

Uh oh!

Uh oh!

ncooke3 commented Jun 4, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

ncooke3 commented Jun 4, 2026 •

edited

Loading