`request.auth` is null for what should be a valid request with self-made custom token [Firestore emulation] #4795

akauppi · 2021-04-15T10:31:55Z

[REQUIRED] Describe your environment

Operating System version: macOS 11.2.3
Browser version: Chrome 89
Firebase SDK version: 9.0.0-beta.1
Firebase Product: firestore

[REQUIRED] Describe the problem

The context is emulation (development). In production everything is nice.

In my security rules, request.auth is null though it should not.

I've authenticated in web client like this:

        await signInWithCustomToken( auth, JSON.stringify({ uid }) )
          .then( creds => {
            console.debug("Signed in as:", { creds });
          })
          .catch( err => {
            console.error("Sign-in failed:", err);
          });

I can see in the browser console that the sign-in is successful.

firestore-debug.log shows this warning:

Apr 15, 2021 1:19:05 PM com.google.net.webchannel.server.common.CorsFilter populateCustomHeaders
WARNING: Invalid $httpHeaders: X-Goog-Api-Client:gl-js/ fire/8.4.1
X-Firebase-GMPID:
Content-Type:text/plain
Authorization:Bearer eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJuYW1lIjoiSnVzdCBNZSIsInBpY3R1cmUiOiJodHRwczovL25vLnN1Y2guZG9tYWluIiwiZW1haWxfdmVyaWZpZWQiOmZhbHNlLCJhdXRoX3RpbWUiOjE2MTg0ODE5NDUsInVzZXJfaWQiOiJkZXYiLCJmaXJlYmFzZSI6eyJpZGVudGl0aWVzIjp7fSwic2lnbl9pbl9wcm92aWRlciI6ImN1c3RvbSJ9LCJpYXQiOjE2MTg0ODE5NDUsImV4cCI6MTYxODQ4NTU0NSwiYXVkIjoiYXBwIiwiaXNzIjoiaHR0cHM6Ly9zZWN1cmV0b2tlbi5nb29nbGUuY29tL2FwcCIsInN1YiI6ImRldiJ9.

Can I do something about that?

But the real problem is that I cannot subscribe to changes of the connection guarded by a rule that uses request.auth.uid. I've established that request.auth is null, by playing with the rule.

Steps to reproduce:

$ git clone [email protected]:akauppi/GroundLevel-firebase-es.git
$ cd GroundLevel-firebase-es
$ git checkout interim   # this branch
$ npm install

$ cd packages/app
$ npm install
$ npm run dev

Open http://localhost:3000/?user=dev and observe the contents of the firestore-debug.log

Expected:

Actual:

As above, without the project entry.

This looks like a bug or two, to me. Things used to work long ago. The current code is based on 9.0.0-beta.1 and I'm no longer able to try with 8.x APIs. Not sure which change has started this problem.

Thanks for any help!

The text was updated successfully, but these errors were encountered:

ANDREYDEN · 2021-04-15T21:16:48Z

@akauppi Something similar happened to me yesterday. I have downgraded to firebase: 8.3.0 and the issue was gone (make sure to clean up package-lock.json and node_modules). Seems like 8.4.0 also has the same issue.

akauppi · 2021-04-16T07:11:31Z

@ANDREYDEN Thanks for the extra info. In my case, I’m (happily) stuck with the 9.x beta (different API) so no downgrade possibility, but I trust Firebase to look into this, and suggest a fix.

samtstern · 2021-04-16T10:59:43Z

@akauppi what version of the Firebase CLI are you using? v9.9.0 includes a critical bug fix around parsing auth headers:
https://github.com/firebase/firebase-tools/releases/tag/v9.9.0

akauppi · 2021-04-17T09:36:02Z

@samtstern I'm using the latest, 9.10.0 so it's not that.

Davste93 · 2021-05-14T09:20:33Z

Was this closed because it was fixed? I'm running 9.10.2 and I have the same issue.

akauppi · 2021-05-14T11:46:35Z

@Davste93 I received the fix with some update. Are you on firebase-tools 9.10.2 that has Firestore emulator 1.11.15?

nocteryals · 2021-05-21T23:40:07Z

Hi!
First, I want to say thanks! you saved me, i had been looking for two days how to solve it.
I work with IONIC 5 and Capacitor. I leave me package.json to whoever may be interested.

This bug is happen to a lot of people but is very difficult find the reason and this forum.

again, thanks a lot to all!

{
"name": "test_notifications",
"version": "0.0.1",
"author": "Ionic Framework",
"homepage": "http://ionicframework.com/",
"private": true,
"scripts": {
"start": "ionic-app-scripts serve",
"clean": "ionic-app-scripts clean",
"build": "ionic-app-scripts build",
"lint": "ionic-app-scripts lint"
},
"dependencies": {
"@angular/animations": "5.2.11",
"@angular/common": "^5.2.11",
"@angular/compiler": "^5.x.x",
"@angular/compiler-cli": "^5.x.x",
"@angular/core": "^5.2.11",
"@angular/forms": "5.2.11",
"@angular/http": "5.2.11",
"@angular/platform-browser": "^5.2.11",
"@angular/platform-browser-dynamic": "^5.x.x",
"@ionic-native/badge": "^4.20.0",
"@ionic-native/core": "~4.20.0",
"@ionic-native/crop": "^4.20.0",
"@ionic-native/device": "^4.20.0",
"@ionic-native/diagnostic": "^4.20.0",
"@ionic-native/email-composer": "^4.20.0",
"@ionic-native/file": "^4.20.0",
"@ionic-native/file-chooser": "^4.20.0",
"@ionic-native/file-path": "^4.20.0",
"@ionic-native/firebase": "^4.20.0",
"@ionic-native/geolocation": "^4.20.0",
"@ionic-native/image-picker": "^4.20.0",
"@ionic-native/keyboard": "^4.20.0",
"@ionic-native/open-native-settings": "^4.20.0",
"@ionic-native/splash-screen": "~4.20.0",
"@ionic-native/status-bar": "~4.20.0",
"@ionic/storage": "2.2.0",
"@ng-bootstrap/ng-bootstrap": "^5.2.2",
"@types/node": "^8.10.58",
"angularfire2": "^5.2.3",
"cordova-android": "^8.1.0",
"cordova-ios": "^5.1.1",
"cordova-plugin-androidx": "^2.0.0",
"cordova-plugin-androidx-adapter": "^1.1.1",
"cordova-plugin-crop": "0.4.0",
"cordova-plugin-device": "^2.0.3",
"cordova-plugin-email-composer": "^0.9.2",
"cordova-plugin-file": "^6.0.2",
"cordova-plugin-filechooser": "^1.2.0",
"cordova-plugin-filepath": "^1.5.8",
"cordova-plugin-firebasex": "^9.1.1",
"cordova-plugin-ionic-keyboard": "^2.2.0",
"cordova-plugin-telerik-imagepicker": "^2.3.3",
"cordova-plugin-update": "^0.1.0",
"cordova.plugins.diagnostic": "^6.0.2",
"firebase": "^7.24.0",
"image-compressor": "^2.0.3",
"ionic-angular": "3.9.5",
"ionic-img-viewer": "^2.9.0",
"ionicons": "3.0.0",
"ios-deploy": "^1.11.3",
"ng-lazyload-image": "^9.0.1",
"ngx-skeleton-loader": "^2.5.0",
"promise-polyfill": "^8.1.3",
"rxjs": "^6.0.0",
"rxjs-compat": "^6.0.0",
"sw-toolbox": "3.6.0",
"zone.js": "0.8.29"
},
"devDependencies": {
"@ionic/app-scripts": "3.2.2",
"cordova-open-native-settings": "^1.5.2",
"cordova-plugin-badge": "^0.8.8",
"cordova-plugin-geolocation": "^4.0.2",
"cordova-plugin-ionic-webview": "^2.5.1",
"cordova-plugin-splashscreen": "^5.0.2",
"cordova-plugin-statusbar": "^2.4.2",
"cordova-plugin-whitelist": "^1.3.3",
"typescript": "^3.7.2",
"xcode": "^2.1.0"
},
"description": "An Ionic project",
"cordova": {
"plugins": {
"cordova-plugin-whitelist": {},
"cordova-plugin-statusbar": {},
"cordova-plugin-splashscreen": {},
"cordova-plugin-ionic-keyboard": {},
"cordova-plugin-filepath": {},
"cordova-plugin-telerik-imagepicker": {
"PHOTO_LIBRARY_USAGE_DESCRIPTION": "Utilizaremos tus fotografias cuando quieras cambiar tu perfil y compartir tus fotos con los demás"
},
"cordova-plugin-device": {},
"cordova-plugin-email-composer": {
"ANDROID_SUPPORT_V4_VERSION": "27.+"
},
"cordova-plugin-file": {},
"cordova-plugin-filechooser": {},
"cordova-plugin-crop": {},
"cordova-plugin-firebasex": {
"FIREBASE_ANALYTICS_COLLECTION_ENABLED": "true",
"FIREBASE_PERFORMANCE_COLLECTION_ENABLED": "true",
"FIREBASE_CRASHLYTICS_COLLECTION_ENABLED": "true",
"ANDROID_ICON_ACCENT": "#FF00FFFF",
"ANDROID_PLAY_SERVICES_TAGMANAGER_VERSION": "17.0.0",
"ANDROID_PLAY_SERVICES_AUTH_VERSION": "18.0.0",
"ANDROID_FIREBASE_ANALYTICS_VERSION": "17.4.0",
"ANDROID_FIREBASE_MESSAGING_VERSION": "20.1.6",
"ANDROID_FIREBASE_CONFIG_VERSION": "19.1.4",
"ANDROID_FIREBASE_PERF_VERSION": "19.0.7",
"ANDROID_FIREBASE_AUTH_VERSION": "19.3.1",
"ANDROID_FIREBASE_INAPPMESSAGING_VERSION": "19.0.6",
"ANDROID_FIREBASE_FIRESTORE_VERSION": "21.4.3",
"ANDROID_CRASHLYTICS_VERSION": "2.10.1",
"ANDROID_CRASHLYTICS_NDK_VERSION": "2.1.1",
"ANDROID_GSON_VERSION": "2.8.6"
},
"cordova.plugins.diagnostic": {
"ANDROIDX_VERSION": "1.+"
},
"cordova-plugin-ionic-webview": {
"ANDROID_SUPPORT_ANNOTATIONS_VERSION": "27.+"
},
"cordova-plugin-geolocation": {},
"cordova-open-native-settings": {},
"cordova-plugin-badge": {}
},
"platforms": [
"ios",
"android"
]
}
}

google-oss-bot added the api: firestore label Apr 15, 2021

akauppi mentioned this issue Apr 15, 2021

Place the right Security Rules back! akauppi/GroundLevel-firebase-es#46

Closed

looptheloop88 added the needs-info label Apr 16, 2021

google-oss-bot added needs-attention and removed needs-info labels Apr 17, 2021

samtstern mentioned this issue Apr 19, 2021

PERMISSION_DENIED in firebase emulator using Google Auth provider firebase/firebase-tools#3258

Closed

yuchenshi mentioned this issue Apr 20, 2021

Don't send empty GMPID header #4810

Merged

looptheloop88 removed the needs-attention label Apr 21, 2021

Feiyang1 closed this as completed in #4810 Apr 21, 2021

google-oss-bot mentioned this issue Apr 21, 2021

Version Packages #4816

Merged

firebase locked and limited conversation to collaborators May 22, 2021

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

`request.auth` is null for what should be a valid request with self-made custom token [Firestore emulation] #4795

`request.auth` is null for what should be a valid request with self-made custom token [Firestore emulation] #4795

akauppi commented Apr 15, 2021 •

edited

Loading

ANDREYDEN commented Apr 15, 2021

akauppi commented Apr 16, 2021

samtstern commented Apr 16, 2021

akauppi commented Apr 17, 2021

Davste93 commented May 14, 2021

akauppi commented May 14, 2021

nocteryals commented May 21, 2021 •

edited

Loading

request.auth is null for what should be a valid request with self-made custom token [Firestore emulation] #4795

request.auth is null for what should be a valid request with self-made custom token [Firestore emulation] #4795

Comments

akauppi commented Apr 15, 2021 • edited Loading

[REQUIRED] Describe your environment

[REQUIRED] Describe the problem

Steps to reproduce:

ANDREYDEN commented Apr 15, 2021

akauppi commented Apr 16, 2021

samtstern commented Apr 16, 2021

akauppi commented Apr 17, 2021

Davste93 commented May 14, 2021

akauppi commented May 14, 2021

nocteryals commented May 21, 2021 • edited Loading

`request.auth` is null for what should be a valid request with self-made custom token [Firestore emulation] #4795

`request.auth` is null for what should be a valid request with self-made custom token [Firestore emulation] #4795

akauppi commented Apr 15, 2021 •

edited

Loading

nocteryals commented May 21, 2021 •

edited

Loading