mirror of
https://github.com/google/app-check
synced 2026-11-10 22:05:53 +05:45
Add initWithServiceName:resourceName:baseURL:APIKey:requestHooks: debugToken: (Swift: init(serviceName:resourceName:baseURL:apiKey: requestHooks:debugToken:)) to GACAppCheckDebugProvider so callers can supply a debug token resolved outside the SDK, such as one the Firebase CLI saved to ~/.config/configstore/firebase-appcheck.json. The existing initializer delegates to it with a nil token. Tokens resolve in this order: the AppCheckDebugToken or FIRAAppCheckDebugToken environment variable, the provided token, the stored local token, then a newly generated one. The provided token is trimmed, and an empty result falls back to the local token. When it is used, no local token is generated, stored, or logged; a debug-level message (I-GAC004005) is logged instead, and its exchanges don't change the local token's registered state. Also add debugTokenSource and AppCheckCoreDebugTokenSource (GACAppCheckDebugTokenSource: local, environmentVariable, provided), which report where the current token came from. The enum is Sendable and marked @nonexhaustive when the compiler supports it, so new sources can be added without breaking Swift clients.
323 lines
8.9 KiB
Swift
323 lines
8.9 KiB
Swift
//
|
|
// Copyright 2021 Google LLC
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
//
|
|
|
|
// MARK: This file is used to evaluate the experience of using Firebase APIs in Swift.
|
|
|
|
import Foundation
|
|
|
|
import AppCheckCore
|
|
|
|
final class AppCheckAPITests {
|
|
func usage() {
|
|
let serviceName = "AppCheckAPITests"
|
|
let resourceName = "projects/test-project-id/google-app-id"
|
|
let appGroupID = "TeamIDPrefix.com.google.appcheck"
|
|
let apiKey = "test-api-key"
|
|
|
|
// MARK: - AppAttestProvider
|
|
|
|
if #available(iOS 14.0, macOS 11.3, macCatalyst 14.5, tvOS 15.0, watchOS 9.0, *) {
|
|
// TODO(andrewheard): Add `requestHooks` in API tests.
|
|
let provider = AppCheckCoreAppAttestProvider(
|
|
serviceName: serviceName,
|
|
resourceName: resourceName,
|
|
baseURL: nil,
|
|
apiKey: apiKey,
|
|
keychainAccessGroup: nil,
|
|
requestHooks: nil as [AppCheckCoreAPIRequestHook]?
|
|
)
|
|
provider.getToken { token, error in
|
|
if let _ /* error */ = error {
|
|
// ...
|
|
} else if let _ /* token */ = token {
|
|
// ...
|
|
}
|
|
}
|
|
}
|
|
|
|
// MARK: - AppCheckCore
|
|
|
|
// Retrieving an AppCheck instance
|
|
let appCheck = AppCheckCore(
|
|
serviceName: serviceName,
|
|
resourceName: resourceName,
|
|
appCheckProvider: DummyAppCheckProvider(),
|
|
settings: DummyAppCheckSettings(),
|
|
tokenDelegate: DummyAppCheckTokenDelegate(),
|
|
keychainAccessGroup: appGroupID
|
|
)
|
|
|
|
let appCheckProtocol: AppCheckCoreProtocol = appCheck
|
|
_ = appCheckProtocol
|
|
|
|
// MARK: - AppCheckCoreSettings
|
|
|
|
let settings = AppCheckCoreSettings()
|
|
settings.isTokenAutoRefreshEnabled = true
|
|
_ = settings.isTokenAutoRefreshEnabled
|
|
|
|
let customSettings = CustomSubclassSettings()
|
|
_ = customSettings.isTokenAutoRefreshEnabled
|
|
|
|
// Get token
|
|
appCheck.token(forcingRefresh: false, completion: { result in
|
|
if let _ /* error */ = result.error {
|
|
_ /* placeholder token */ = result.token
|
|
// ...
|
|
} else {
|
|
_ /* token */ = result.token
|
|
// ...
|
|
}
|
|
})
|
|
|
|
// Get token (async/await)
|
|
Task {
|
|
do {
|
|
let token = try await appCheck.token(forcingRefresh: false)
|
|
_ /* token */ = token.token
|
|
} catch {
|
|
_ /* error */ = error
|
|
}
|
|
}
|
|
|
|
// Get limited-use token
|
|
appCheck.limitedUseToken(completion: { result in
|
|
if let _ /* error */ = result.error {
|
|
_ /* placeholder token */ = result.token
|
|
// ...
|
|
} else {
|
|
_ /* token */ = result.token
|
|
// ...
|
|
}
|
|
})
|
|
|
|
// Get limited-use token (async/await)
|
|
Task {
|
|
do {
|
|
let token = try await appCheck.limitedUseToken()
|
|
_ /* token */ = token.token
|
|
} catch {
|
|
_ /* error */ = error
|
|
}
|
|
}
|
|
|
|
// MARK: - `AppCheckDebugProvider`
|
|
|
|
let dummyHook: AppCheckCoreAPIRequestHook = { _ in }
|
|
let requestHooks: [AppCheckCoreAPIRequestHook] = [dummyHook]
|
|
|
|
// `AppCheckDebugProvider` initializer
|
|
let debugProvider = AppCheckCoreDebugProvider(
|
|
serviceName: serviceName,
|
|
resourceName: resourceName,
|
|
baseURL: nil,
|
|
apiKey: apiKey,
|
|
requestHooks: requestHooks
|
|
)
|
|
// Get token
|
|
debugProvider.getToken { token, error in
|
|
if let _ /* error */ = error {
|
|
// ...
|
|
} else if let _ /* token */ = token {
|
|
// ...
|
|
}
|
|
}
|
|
|
|
// Get token (async/await)
|
|
Task {
|
|
do {
|
|
_ = try await debugProvider.getToken()
|
|
} catch {
|
|
// ...
|
|
}
|
|
}
|
|
|
|
_ = debugProvider.localDebugToken()
|
|
_ = debugProvider.currentDebugToken()
|
|
|
|
// `AppCheckDebugProvider` initializer with a caller-provided debug token
|
|
let providedTokenDebugProvider = AppCheckCoreDebugProvider(
|
|
serviceName: serviceName,
|
|
resourceName: resourceName,
|
|
baseURL: nil,
|
|
apiKey: apiKey,
|
|
requestHooks: requestHooks,
|
|
debugToken: "debug-token"
|
|
)
|
|
_ = providedTokenDebugProvider.currentDebugToken()
|
|
|
|
// A `nil` debug token must resolve without ambiguity against the 5-argument initializer.
|
|
let nilTokenDebugProvider = AppCheckCoreDebugProvider(
|
|
serviceName: serviceName,
|
|
resourceName: resourceName,
|
|
baseURL: nil,
|
|
apiKey: apiKey,
|
|
requestHooks: requestHooks,
|
|
debugToken: nil
|
|
)
|
|
|
|
// Debug token source
|
|
switch nilTokenDebugProvider.debugTokenSource {
|
|
case .local: break
|
|
case .environmentVariable: break
|
|
case .provided: break
|
|
@unknown default: break
|
|
}
|
|
let _: any Sendable = nilTokenDebugProvider.debugTokenSource
|
|
|
|
// MARK: - AppCheckToken
|
|
|
|
let token = AppCheckCoreToken(token: "token", expirationDate: Date.distantFuture)
|
|
_ = token.token
|
|
_ = token.expirationDate
|
|
_ = token.receivedAtDate
|
|
|
|
let tokenWithReceivedAt = AppCheckCoreToken(
|
|
token: "token",
|
|
expirationDate: Date.distantFuture,
|
|
receivedAt: Date()
|
|
)
|
|
_ = tokenWithReceivedAt.receivedAtDate
|
|
|
|
// MARK: - AppCheckCoreTokenResult
|
|
|
|
let successResult = AppCheckCoreTokenResult(token: token)
|
|
_ = successResult.token
|
|
_ = successResult.error
|
|
|
|
let failureResult = AppCheckCoreTokenResult(error: NSError(domain: "test", code: 1))
|
|
_ = failureResult.token
|
|
_ = failureResult.error
|
|
|
|
let designatedResult = AppCheckCoreTokenResult(token: token, error: nil)
|
|
_ = designatedResult.token
|
|
_ = designatedResult.error
|
|
|
|
_ = AppCheckCoreTokenResult.placeholderToken()
|
|
|
|
// MARK: - AppCheckErrors
|
|
|
|
_ = AppCheckCoreErrorDomain
|
|
|
|
appCheck.token(forcingRefresh: false, completion: { result in
|
|
if let error = result.error {
|
|
switch error {
|
|
case AppCheckCoreErrorCode.unknown:
|
|
break
|
|
case AppCheckCoreErrorCode.serverUnreachable:
|
|
break
|
|
case AppCheckCoreErrorCode.invalidConfiguration:
|
|
break
|
|
case AppCheckCoreErrorCode.keychain:
|
|
break
|
|
case AppCheckCoreErrorCode.unsupported:
|
|
break
|
|
default:
|
|
break
|
|
}
|
|
}
|
|
// ...
|
|
})
|
|
|
|
// MARK: - AppCheckProvider
|
|
|
|
// A protocol implemented by:
|
|
// - `AppAttestDebugProvider`
|
|
// - `AppCheckDebugProvider`
|
|
// - `DeviceCheckProvider`
|
|
|
|
// MARK: - DeviceCheckProvider
|
|
|
|
// `DeviceCheckProvider` initializer
|
|
#if !os(watchOS)
|
|
// TODO(andrewheard): Add `requestHooks` in API tests.
|
|
let deviceCheckProvider = AppCheckCoreDeviceCheckProvider(
|
|
serviceName: serviceName,
|
|
resourceName: resourceName,
|
|
apiKey: apiKey,
|
|
requestHooks: nil as [AppCheckCoreAPIRequestHook]?
|
|
)
|
|
// Get token
|
|
deviceCheckProvider.getToken { token, error in
|
|
if let _ /* error */ = error {
|
|
// ...
|
|
} else if let _ /* token */ = token {
|
|
// ...
|
|
}
|
|
}
|
|
// Get token (async/await)
|
|
Task {
|
|
do {
|
|
_ = try await deviceCheckProvider.getToken()
|
|
} catch AppCheckCoreErrorCode.unsupported {
|
|
// ...
|
|
} catch {
|
|
// ...
|
|
}
|
|
}
|
|
#endif // !os(watchOS)
|
|
|
|
// MARK: - AppCheckCoreLogger
|
|
|
|
// Set the log level for App Check Core
|
|
AppCheckCoreLogger.logLevel = .debug
|
|
|
|
// MARK: - AppCheckCoreErrors
|
|
|
|
let code: AppCheckCoreMessageCode! = nil
|
|
switch code! {
|
|
case .unknown: break
|
|
case .providerIsMissing: break
|
|
case .stagingModeEnabled: break
|
|
case .unexpectedHTTPCode: break
|
|
case .invalidRequestHook: break
|
|
case .localDebugToken: break
|
|
case .environmentVariableDebugToken: break
|
|
case .debugProviderFirebaseEnvironmentVariable: break
|
|
case .debugProviderFailedExchange: break
|
|
case .providedDebugToken: break
|
|
case .appAttestNotSupported: break
|
|
case .attestationRejected: break
|
|
case .assertionRejected: break
|
|
@unknown default: break
|
|
}
|
|
}
|
|
}
|
|
|
|
class DummyAppCheckProvider: NSObject, AppCheckCoreProvider {
|
|
func getToken(completion handler: @escaping (AppCheckCoreToken?, Error?) -> Void) {
|
|
handler(AppCheckCoreToken(token: "token", expirationDate: .distantFuture), nil)
|
|
}
|
|
|
|
func getLimitedUseToken(completion handler: @escaping (AppCheckCoreToken?, Error?)
|
|
-> Void) {
|
|
handler(
|
|
AppCheckCoreToken(token: "token", expirationDate: .init(timeIntervalSinceNow: 3600)),
|
|
nil
|
|
)
|
|
}
|
|
}
|
|
|
|
class DummyAppCheckSettings: NSObject, AppCheckCoreSettingsProtocol {
|
|
var isTokenAutoRefreshEnabled: Bool = true
|
|
}
|
|
|
|
class CustomSubclassSettings: AppCheckCoreSettings {}
|
|
|
|
class DummyAppCheckTokenDelegate: NSObject, AppCheckCoreTokenDelegate {
|
|
func tokenDidUpdate(_ token: AppCheckCoreToken, serviceName: String) {}
|
|
}
|