Firebase App Check using reCAPTCHA v3

[@HeavyMachinery512]

Thanks a lot for the video. Much needed for me being in the early stages of the Firebase journey. really nicely explained. Until now, I always thought implementing App Check must be very difficult in code lol. Thanks again.

[@CodingCatDev]

I am glad you got a lot of use from it!

[@jack_lion]

Great video thanks for the coverage

[@CodingCatDev]

Glad you enjoyed it!

[@jack_lion]

I have a question regarding app check and firestore rules if you wouldn’t mind hearing it. It seems that when I enforce app check it prevents authenticated users from querying data from their firestore doc. I’m assuming this is because of app check since the issue stops when I stop enforcing app check. What sorts of extra considerations should be made towards the firestore rules when enforcing app check? Thanks again in advance

[@jack_lion]

Nevermind, it was a typo in the URL i entered on recaptcha lol. Problem solved

[@CodingCatDev]

@@jack_lion great I am glad you were able to find it!

[@mauhidusmani7212]

thank you

[@CodingCatDev]

You're welcome, thanks for checking it out!

[@MrBl0m]

thanks

[@erizonencina4917]

thanks a lot for your video, it was helpull to me. it's a pity that we need to add debug tokens by each develop environment.

[@CodingCatDev]

It is a little painful, but hopefully worth it to keep other bad actors out :D

[@georgedicu6001]

you dont need to specify false on all docs, its by default implemented. If you dont have a collection/doc allowed, its by default denied.

[@CodingCatDev]

Old habits, from when dbs were left open I guess.

[@georgedicu6001]

a very very good security enforcement habit I would say! @@CodingCatDev BTW, awesome video!

[@bryanlopez1604]

I have a question, I did not do the deploy, I still have it in my local but the secret key in the appcheck does not take it, do you know if it is because I do not have the deploy? help plis

[@mn109]

Thanks for the video! I have three Firebase apps. Should I create a reCAPTCHA key for each app, or can I share one key between different apps? As long as the app site domains are registered in the key, it seems to work. But from security perspective, I feel like creating a key for each app is better when it comes to analyzing users access history and utilizing more features of reCAPTCHA scoring systems and so on.

[@CodingCatDev]

I would create a key per app.