ARTICLE AD BOX
I am developing an Android app (Kotlin) using Firebase Auth, Firestore and App Check.
Problem:
Firestore requests return PERMISSION_DENIED immediately after login.
What I verified:
• User is authenticated successfully
• Firestore rules set to allow read, write: if true
• App Check debug provider is enabled
• Debug token generated and registered
• App Check metrics show requests rejected as invalid
• App runs from Android Studio (debug build)
Logs confirm DebugAppCheckProviderFactory is initialized.
The error occurs on the first Firestore read.
Important:
This only happens in debug builds.
Questions:
1. Can Firestore reject requests before security rules if App Check fails?
2. Could SHA-256 mismatch cause App Check rejection even with debug provider?
3. Is there a known issue where debug tokens are ignored?
Any guidance would be appreciated.
Thx everyone
