-
Notifications
You must be signed in to change notification settings - Fork 936
Add App Check token to Auth requests #6982
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
🦋 Changeset detectedLatest commit: 968629d The changes in this PR will be included in the next version bump. This PR includes changesets to release 3 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
8881085
to
2bb8b1e
Compare
Size Report 1Affected Products
Test Logs |
Size Analysis Report 1This report is too large (229,775 characters) to be displayed here in a GitHub comment. Please use the below link to see the full report on Google Cloud Storage.Test Logs |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Generally LGTM pending some comments
config | ||
); | ||
_initializeAuthInstance(authInstance, deps); | ||
_assert( |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why are we getting rid of the anon function here? I think we copied this from Firestore originally (not exactly sure why it's done this way)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yeahh, I wasn't sure why we had the anon function either and didn't notice a difference in behavior with / without it? I think Firestore currently doesn't use an anon function:
const firestoreInstance = new Firestore( |
Will leave this open if other folks have an opinion about it
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
+1 to remove the anon function if we did not observe any behavior change
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Cool cool
I also added @prameshj to give her a chance to double check things |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for looping me in! Mostly LGTM, one question about _openRedirect test case.
* Add App Check token to headers of Auth requests * Add App Check token to widget url fragment
* Add App Check token to headers of Auth requests * Add App Check token to widget url fragment
Discussion
Includes App Check token in Auth header requests to backend, if present. Passes App Check token to widget via the URL fragment
As part of go/auth-app-check-sdk
Internal bug link: b/265453815
Testing
yarn test
passes inpackages/auth
andpackages/auth-compat
API Changes
N/A