Skip to content

feat(appcheck): appcheck recaptcha enterprise support#18261

Open
cynthiajoan wants to merge 25 commits into
mainfrom
firebaseai/appcheck_research
Open

feat(appcheck): appcheck recaptcha enterprise support#18261
cynthiajoan wants to merge 25 commits into
mainfrom
firebaseai/appcheck_research

Conversation

@cynthiajoan

Copy link
Copy Markdown
Collaborator

Description

Replace this paragraph with a description of what this PR is doing. If you're modifying existing behavior, describe the existing behavior, how this PR is changing it, and what motivated the change.

Related Issues

Replace this paragraph with a list of issues related to this PR from the issue database. Indicate, which of these issues are resolved or fixed by this PR. Note that you'll have to prefix the issue numbers with flutter/flutter#.

Checklist

Before you create this PR confirm that it meets all requirements listed below by checking the relevant checkboxes ([x]).
This will ensure a smooth and quick review process. Updating the pubspec.yaml and changelogs is not required.

  • I read the Contributor Guide and followed the process outlined there for submitting PRs.
  • My PR includes unit or integration tests for all changed/updated/fixed behaviors (See Contributor Guide).
  • All existing and new tests are passing.
  • I updated/added relevant documentation (doc comments with ///).
  • The analyzer (melos run analyze) does not report any problems on my PR.
  • I read and followed the Flutter Style Guide.
  • I signed the CLA.
  • I am willing to follow-up on review comments in a timely manner.

Breaking Change

Does your PR require plugin users to manually update their apps to accommodate your change?

  • Yes, this is a breaking change.
  • No, this is not a breaking change.

@gemini-code-assist

Copy link
Copy Markdown
Contributor
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize the Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counterproductive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

@cynthiajoan cynthiajoan marked this pull request as ready for review June 3, 2026 04:42
@cynthiajoan

Copy link
Copy Markdown
Collaborator Author

/gemini review

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces support for reCAPTCHA providers across Android, iOS, and Web platforms in firebase_app_check and integrates recaptchaSiteKey into FirebaseOptions across firebase_core platforms. Key feedback includes removing mavenLocal() from build files to prevent consumer dependency issues, adhering to the repository style guide by avoiding the ! operator in _safeToDart, and exporting WebProvider to replace dynamic types with safer, strongly-typed declarations in the example app.

Comment thread packages/firebase_app_check/firebase_app_check/android/build.gradle Outdated
Comment thread packages/firebase_app_check/firebase_app_check/android/build.gradle Outdated
Comment thread packages/firebase_core/firebase_core_web/lib/firebase_core_web.dart
Comment thread packages/firebase_app_check/firebase_app_check/example/lib/main.dart Outdated
@cynthiajoan cynthiajoan requested a review from Lyokone June 10, 2026 05:11
implementation platform("com.google.firebase:firebase-bom:${getRootProjectExtOrCoreProperty("FirebaseSDKVersion", firebaseCoreProject)}")
implementation 'com.google.firebase:firebase-appcheck-debug'
implementation 'com.google.firebase:firebase-appcheck-playintegrity'
compileOnly 'com.google.firebase:firebase-appcheck-recaptcha'

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@rlazo would like to double check the compileOnly dependency with you. Since flutterfire AppCheck plugin is calling RecaptchaAppCheckProviderFactory, so we would have to include this for code compile, but the AAR would not be bundled to developer's app until they add the implementation of the firebase-appcheck-recaptcha. Does this sound correct to you?

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You can't have a compileOnly dependency on an AAR according to https://developer.android.com/build/dependencies#dependency_configurations


if (provider is WebDebugProvider) {
if (provider == null || provider is WebReCaptchaProvider) {
jsProvider = null;

@SelaseKay SelaseKay Jun 15, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@cynthiajoan, mapping WebRecaptchaProvider to a null jsProvider initially seemed a bit odd to me, but I assume this is related to the changes introduced in firebase/firebase-js-sdk#10031. Just wanted to confirm if that’s the case.

@SelaseKay

Copy link
Copy Markdown
Contributor

@cynthiajoan Overall, LGTM. It may be worth addressing the analyzer and formatting CI issues

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants