Files
Andrew Heard ebd7f0547a feat(debug): add debugToken: initializer and debugTokenSource (#134)
Add initWithServiceName:resourceName:baseURL:APIKey:requestHooks:
debugToken: (Swift: init(serviceName:resourceName:baseURL:apiKey:
requestHooks:debugToken:)) to GACAppCheckDebugProvider so callers can
supply a debug token resolved outside the SDK, such as one the Firebase
CLI saved to ~/.config/configstore/firebase-appcheck.json. The existing
initializer delegates to it with a nil token.

Tokens resolve in this order: the AppCheckDebugToken or
FIRAAppCheckDebugToken environment variable, the provided token, the
stored local token, then a newly generated one. The provided token is
trimmed, and an empty result falls back to the local token. When it is
used, no local token is generated, stored, or logged; a debug-level
message (I-GAC004005) is logged instead, and its exchanges don't change
the local token's registered state.

Also add debugTokenSource and AppCheckCoreDebugTokenSource
(GACAppCheckDebugTokenSource: local, environmentVariable, provided),
which report where the current token came from. The enum is Sendable
and marked @nonexhaustive when the compiler supports it, so new sources
can be added without breaking Swift clients.
2026-11-06 12:23:01 -05:00

323 lines
8.9 KiB
Swift

//
// Copyright 2021 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//
// MARK: This file is used to evaluate the experience of using Firebase APIs in Swift.
import Foundation
import AppCheckCore
final class AppCheckAPITests {
func usage() {
let serviceName = "AppCheckAPITests"
let resourceName = "projects/test-project-id/google-app-id"
let appGroupID = "TeamIDPrefix.com.google.appcheck"
let apiKey = "test-api-key"
// MARK: - AppAttestProvider
if #available(iOS 14.0, macOS 11.3, macCatalyst 14.5, tvOS 15.0, watchOS 9.0, *) {
// TODO(andrewheard): Add `requestHooks` in API tests.
let provider = AppCheckCoreAppAttestProvider(
serviceName: serviceName,
resourceName: resourceName,
baseURL: nil,
apiKey: apiKey,
keychainAccessGroup: nil,
requestHooks: nil as [AppCheckCoreAPIRequestHook]?
)
provider.getToken { token, error in
if let _ /* error */ = error {
// ...
} else if let _ /* token */ = token {
// ...
}
}
}
// MARK: - AppCheckCore
// Retrieving an AppCheck instance
let appCheck = AppCheckCore(
serviceName: serviceName,
resourceName: resourceName,
appCheckProvider: DummyAppCheckProvider(),
settings: DummyAppCheckSettings(),
tokenDelegate: DummyAppCheckTokenDelegate(),
keychainAccessGroup: appGroupID
)
let appCheckProtocol: AppCheckCoreProtocol = appCheck
_ = appCheckProtocol
// MARK: - AppCheckCoreSettings
let settings = AppCheckCoreSettings()
settings.isTokenAutoRefreshEnabled = true
_ = settings.isTokenAutoRefreshEnabled
let customSettings = CustomSubclassSettings()
_ = customSettings.isTokenAutoRefreshEnabled
// Get token
appCheck.token(forcingRefresh: false, completion: { result in
if let _ /* error */ = result.error {
_ /* placeholder token */ = result.token
// ...
} else {
_ /* token */ = result.token
// ...
}
})
// Get token (async/await)
Task {
do {
let token = try await appCheck.token(forcingRefresh: false)
_ /* token */ = token.token
} catch {
_ /* error */ = error
}
}
// Get limited-use token
appCheck.limitedUseToken(completion: { result in
if let _ /* error */ = result.error {
_ /* placeholder token */ = result.token
// ...
} else {
_ /* token */ = result.token
// ...
}
})
// Get limited-use token (async/await)
Task {
do {
let token = try await appCheck.limitedUseToken()
_ /* token */ = token.token
} catch {
_ /* error */ = error
}
}
// MARK: - `AppCheckDebugProvider`
let dummyHook: AppCheckCoreAPIRequestHook = { _ in }
let requestHooks: [AppCheckCoreAPIRequestHook] = [dummyHook]
// `AppCheckDebugProvider` initializer
let debugProvider = AppCheckCoreDebugProvider(
serviceName: serviceName,
resourceName: resourceName,
baseURL: nil,
apiKey: apiKey,
requestHooks: requestHooks
)
// Get token
debugProvider.getToken { token, error in
if let _ /* error */ = error {
// ...
} else if let _ /* token */ = token {
// ...
}
}
// Get token (async/await)
Task {
do {
_ = try await debugProvider.getToken()
} catch {
// ...
}
}
_ = debugProvider.localDebugToken()
_ = debugProvider.currentDebugToken()
// `AppCheckDebugProvider` initializer with a caller-provided debug token
let providedTokenDebugProvider = AppCheckCoreDebugProvider(
serviceName: serviceName,
resourceName: resourceName,
baseURL: nil,
apiKey: apiKey,
requestHooks: requestHooks,
debugToken: "debug-token"
)
_ = providedTokenDebugProvider.currentDebugToken()
// A `nil` debug token must resolve without ambiguity against the 5-argument initializer.
let nilTokenDebugProvider = AppCheckCoreDebugProvider(
serviceName: serviceName,
resourceName: resourceName,
baseURL: nil,
apiKey: apiKey,
requestHooks: requestHooks,
debugToken: nil
)
// Debug token source
switch nilTokenDebugProvider.debugTokenSource {
case .local: break
case .environmentVariable: break
case .provided: break
@unknown default: break
}
let _: any Sendable = nilTokenDebugProvider.debugTokenSource
// MARK: - AppCheckToken
let token = AppCheckCoreToken(token: "token", expirationDate: Date.distantFuture)
_ = token.token
_ = token.expirationDate
_ = token.receivedAtDate
let tokenWithReceivedAt = AppCheckCoreToken(
token: "token",
expirationDate: Date.distantFuture,
receivedAt: Date()
)
_ = tokenWithReceivedAt.receivedAtDate
// MARK: - AppCheckCoreTokenResult
let successResult = AppCheckCoreTokenResult(token: token)
_ = successResult.token
_ = successResult.error
let failureResult = AppCheckCoreTokenResult(error: NSError(domain: "test", code: 1))
_ = failureResult.token
_ = failureResult.error
let designatedResult = AppCheckCoreTokenResult(token: token, error: nil)
_ = designatedResult.token
_ = designatedResult.error
_ = AppCheckCoreTokenResult.placeholderToken()
// MARK: - AppCheckErrors
_ = AppCheckCoreErrorDomain
appCheck.token(forcingRefresh: false, completion: { result in
if let error = result.error {
switch error {
case AppCheckCoreErrorCode.unknown:
break
case AppCheckCoreErrorCode.serverUnreachable:
break
case AppCheckCoreErrorCode.invalidConfiguration:
break
case AppCheckCoreErrorCode.keychain:
break
case AppCheckCoreErrorCode.unsupported:
break
default:
break
}
}
// ...
})
// MARK: - AppCheckProvider
// A protocol implemented by:
// - `AppAttestDebugProvider`
// - `AppCheckDebugProvider`
// - `DeviceCheckProvider`
// MARK: - DeviceCheckProvider
// `DeviceCheckProvider` initializer
#if !os(watchOS)
// TODO(andrewheard): Add `requestHooks` in API tests.
let deviceCheckProvider = AppCheckCoreDeviceCheckProvider(
serviceName: serviceName,
resourceName: resourceName,
apiKey: apiKey,
requestHooks: nil as [AppCheckCoreAPIRequestHook]?
)
// Get token
deviceCheckProvider.getToken { token, error in
if let _ /* error */ = error {
// ...
} else if let _ /* token */ = token {
// ...
}
}
// Get token (async/await)
Task {
do {
_ = try await deviceCheckProvider.getToken()
} catch AppCheckCoreErrorCode.unsupported {
// ...
} catch {
// ...
}
}
#endif // !os(watchOS)
// MARK: - AppCheckCoreLogger
// Set the log level for App Check Core
AppCheckCoreLogger.logLevel = .debug
// MARK: - AppCheckCoreErrors
let code: AppCheckCoreMessageCode! = nil
switch code! {
case .unknown: break
case .providerIsMissing: break
case .stagingModeEnabled: break
case .unexpectedHTTPCode: break
case .invalidRequestHook: break
case .localDebugToken: break
case .environmentVariableDebugToken: break
case .debugProviderFirebaseEnvironmentVariable: break
case .debugProviderFailedExchange: break
case .providedDebugToken: break
case .appAttestNotSupported: break
case .attestationRejected: break
case .assertionRejected: break
@unknown default: break
}
}
}
class DummyAppCheckProvider: NSObject, AppCheckCoreProvider {
func getToken(completion handler: @escaping (AppCheckCoreToken?, Error?) -> Void) {
handler(AppCheckCoreToken(token: "token", expirationDate: .distantFuture), nil)
}
func getLimitedUseToken(completion handler: @escaping (AppCheckCoreToken?, Error?)
-> Void) {
handler(
AppCheckCoreToken(token: "token", expirationDate: .init(timeIntervalSinceNow: 3600)),
nil
)
}
}
class DummyAppCheckSettings: NSObject, AppCheckCoreSettingsProtocol {
var isTokenAutoRefreshEnabled: Bool = true
}
class CustomSubclassSettings: AppCheckCoreSettings {}
class DummyAppCheckTokenDelegate: NSObject, AppCheckCoreTokenDelegate {
func tokenDidUpdate(_ token: AppCheckCoreToken, serviceName: String) {}
}