[ad_1]
I am utilizing FlutterFire to authenticate my customers, and the strategy verifyPhoneNumber is giving me issues on some units (on each Android and iOS).
On the uncommon events by which the app can’t be verified by way of SafetyNet (Android) or APNs silent notifications (iOS), the firebase sdk triggers the reCaptcha stream and it fails. The explanation of the failure is that my api keys are restricted to my Android and iOS apps on the Google Cloud Console, and though is the app (utilizing FlutterFire’s sdk) who’s opening the reCaptcha display screen, it’s doing it in an exterior browser that’s blocked from utilizing this keys.
If I take away the restrictions from my keys it really works completely, however I am afraid that if I do this another person can freely use them.
Is that this the meant behaviour of FlutterFire? I do not know if I am doing one thing incorrect, however I nonetheless have not discovered what. I can’t discover any method to configure this behaviour when calling verifyPhoneNumber, the browser with the reCaptcha request is opened robotically.
Can be good if the identical api key could possibly be restricted for each an app and a http referrer however this not doable, so I did not discover a solution there both.
Any ideas? I’ve eliminated the restrictions for now, however I would not wish to hold it this manner.
Thanks!
[ad_2]
