Dropping my thoughts right here as a result of the app was working nice earlier than my testers and I took a couple of weeks off of beta testing and now we’re testing once more and the app is failing and it’s tied to AppCheck. Neglect actual dates however say labored for all of April and never now, Might 12-18 we began making an attempt to check once more with minor code updates for the UI, no adjustments in any respect to do with AppCheck. If I set AppCheck to UNenforced within the Firebase console, the whole lot works completely and I see the “Unverified: Invalid requests” coming in from SOME of my app cases whereas others are nonetheless sending correct verified requests. All the identical model of the app (as in very same construct quantity in TestFlight).
Was utilizing Firebase iOS SDK 10.3.0 when issues have been working, when issues began failing tried updating to newest model (10.9.0) with no decision.
Utilizing AppAttest because the attestation supplier (NOT utilizing DeviceCheck)
State of affairs the place AppCheck IS nonetheless working accurately:
launch mode:
Three of my private gadgets which are registered to my Apple Developer account are all working (i.e. verified requests) when operating the app construct distributed through Check Flight (i.e. launch mode)
-
iOS 15.6, 15.7.* & iOS 16 (16.1 as much as 16.4.1 (a) and all variations in between)
-
I used to be utilizing registered debug tokens for these gadgets throughout improvement (with AppCheck set to implement) once I was operating debug builds however have since deleted these tokens, as in there aren’t any registered debug tokens in any respect.
debug mode:
Registering debug tokens nonetheless works for debug builds however after all this is not possible related to my drawback
State of affairs the place AppCheck is NOT working accurately anymore:
Any launch mode app occasion operating on my testers’ gadgets, distributed through TestFlight. Testers have been utilizing iOS 16.4 (when issues have been working), now they’re on 16.4.1 and 16.4.1 (a) . I do NOT assume it’s the iOS model although since my private gadgets operating 16.4.1 and 16.4.1 (a) are simply tremendous.
So did one thing change on Apple’s finish? Firebase’s finish? One thing to do with my private gadgets being registered to my Apple Developer account??? One thing to do with beforehand utilizing debug tokens for these gadgets regardless that they’re deleted now? I do not see a lot of posts about App Attest or App Examine failing and picture if this was a widespread difficulty it will be all over, or am I one of many few folks utilizing it???
Fortuitously I can nonetheless take a look at and publish the app with AppCheck unenforced since I’ve intensive Firebase safety guidelines in place to guard all person information (which is finish to finish encrypted anyway) however would nonetheless run the danger of an authenticated person hammering the server and bankrupting the corporate, so okay danger within the quick time period however have to get it sorted in subsequent few months.
Have tried having testers delete the app, reinstall from TestFlight, no luck. Creating a brand new construct and importing it to TestFlight to see if that resolved it when everybody up to date, no luck.
