FID mode: firebase-functions' legacy firebase-iid dependency makes sends to the FID return UNREGISTERED for minutes to hours after every app update

Abierto
  • ¿Algo no está bien?
#8,694 1 comentario 0 reacciones 0 asignados Ver en GitHub

Los mantenedores suelen responder en 1 día

Nadie ha tomado este issue todavía.

Evaluación

Dificultad
4/5
Tiempo estimado
3-5 días
Aptitud para principiantes
48/100
Tipo de issue
Error
Claridad
Bien especificado
Estado de actividad
Activo
Stack tecnológico
android, java
Área
backend-api-design

Línea de trabajo

Start by reading the firebase-functions dependency declaration and FirebaseContextProvider path described in the report, then trace how the FirebaseInstanceIdInternal token is added to callable requests when FID mode is enabled. Check the existing Functions tests for dependency and request-header behavior. Done when FID-mode apps can use callables without legacy IID registration disrupting FID delivery, with tests covering the behavior.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

api: functions api: messaging type: bug
[READ] Step 1: Are you in the right place?

Yes: this is a bug in the interaction of firebase-functions and firebase-messaging (FID registration mode) shipped in this repository.

[REQUIRED] Step 2: Describe your environment
  • Android Studio version: Rabbit | 2026.2.1
  • Firebase Component: Functions + Cloud Messaging (Firebase Installation ID registration mode)
  • Component version: firebase-bom:35.0.0 → firebase-functions:23.0.0 (transitively firebase-iid:21.1.0), firebase-messaging:26.0.0, firebase-installations:20.0.0; Google Play services 26.37.37; reproduced on an emulator (Pixel 10 Pro Google Play image, API 37) and on a Galaxy S25 (Android 16) with a Play Store build; server side firebase-admin 14.4.0 (Node) sending with { fid }.
[REQUIRED] Step 3: Describe the problem

With firebase_messaging_installation_id_enabled=true, every in-place app update (new versionCode, Play Store update or adb install -r) makes FCM answer 404 UNREGISTERED (messaging/installation-id-not-registered) for the device's unchanged FID — immediately at install time (before the app is even started) and then for a long, variable time after the app starts: 10 min, 25 min and once 3 h in our measurements, after which sends succeed again with the same FID without any client action. During that window every direct send to the FID is lost. The app does re-register correctly on start (onRegistered(fid) fires within ~10 s, the SDK cache flips to the new app version, topic subscriptions on fcmregistrations.googleapis.com/.../registrations/<fid> succeed), so this is not a missing re-registration.

Root cause (verified): firebase-functions:23.0.0 still depends on the deprecated legacy firebase-iid:21.1.0 and declares Dependency.requiredProvider(FirebaseInstanceIdInternal). FirebaseContextProvider calls FirebaseInstanceIdInternal.getToken() for every callable to fill the Firebase-Instance-ID-Token header. In FID mode that legacy (app-version-bound) registration conflicts with the FID registration of the same app instance at the FCM backend. With firebase-iid excluded from the build (and a stub FirebaseInstanceIdInternal registered so FunctionsRegistrar is satisfied), the problem disappears completely: two consecutive updates showed no outage at all, the FID stayed routable from the first second. This looks like the Android counterpart of firebase/firebase-js-sdk#10135 (legacy getToken() from a callable invalidates the FID as push target), where a cross-platform fix was announced.

Steps to reproduce:
  1. App with firebase_messaging_installation_id_enabled=true, firebase-messaging:26.0.0, firebase-functions:23.0.0, at least one httpsCallable on start. Register the FID with your server. Verify with the Admin SDK: getMessaging().send({ fid, data: {...} }, /* dryRun */ true) → OK.
  2. Install an update with a higher versionCode (adb install -r). Within ~15 s the dry run (and real sends) return messaging/installation-id-not-registered, before the app is started.
  3. Start the app. Logcat (setprop log.tag.FirebaseMessaging VERBOSE): Making new request for: <senderId> → Token successfully retrieved → onRegistered(fid) fires; shared_prefs/com.google.android.gms.appid.xml shows the new appVersion. Sends keep failing with 404 for 10 min to hours.
  4. Repeat step 2–3 with firebase-iid excluded from the classpath (configurations.all { exclude(group = "com.google.firebase", module = "firebase-iid") } plus a no-op FirebaseInstanceIdInternal component): sends succeed from the first poll after the update and the install itself no longer invalidates the registration.

Measurements (one emulator, same FID, dry-run poll every 10–30 s; each row is one in-place update):

Build Change Result
control 1 none 404 for ≥ 10.4 min (31 polls)
control 2 none 404 for ≥ 10.6 min (41 polls)
explicit FirebaseMessaging.register() on start 404 for ≥ 24.7 min; register() joins the same request as the auto sync, no effect
unregister() then register() on start 404 for ≥ 5 min
update installed, app NOT started 404 for ≥ 18.8 min, no self-recovery
firebase-iid excluded, stub component OK 19 s after start (after 22 min of 404 before)
second update with firebase-iid excluded OK from the first poll, 61/61 over 10 min — no outage
third/fourth update with firebase-iid excluded OK from the first poll, no outage

Also ruled out: user interaction, Wi-Fi reconnect (GCM reconnect), Doze/screen state, a second cold start. A real (non-dry-run) data send during the window also returned 404.

Relevant Code:
// AndroidManifest.xml
<meta-data android:name="firebase_messaging_installation_id_enabled" android:value="true" />

// Workaround that removes the outage (app/build.gradle.kts)
configurations.all { exclude(group = "com.google.firebase", module = "firebase-iid") }

// Stub so FunctionsRegistrar's requiredProvider(FirebaseInstanceIdInternal) is satisfied
// (without it Provider.get() is null and every callable fails with an NPE in FirebaseContextProvider.getContext)
internal class NoLegacyInstanceId : FirebaseInstanceIdInternal {
    override fun getId(): String? = null
    override fun getToken(): String? = null            // header omitted; our backend does not read it
    override fun getTokenTask(): Task<String> = Tasks.forException(IllegalStateException("legacy IID removed"))
    override fun deleteToken(senderId: String, scope: String): Unit = throw IOException("legacy IID removed")
    override fun addNewTokenListener(listener: FirebaseInstanceIdInternal.NewTokenListener) = Unit
}
class LegacyInstanceIdShimRegistrar : ComponentRegistrar {
    override fun getComponents() = listOf(
        Component.builder(FirebaseInstanceIdInternal::class.java).factory { NoLegacyInstanceId() }.build(),
    )
}
// registered via <meta-data android:name="com.google.firebase.components:...LegacyInstanceIdShimRegistrar"
//   android:value="com.google.firebase.components.ComponentRegistrar"/> inside ComponentDiscoveryService

Expected: firebase-functions should not require the legacy firebase-iid (and should not fetch a legacy registration token) when the app runs FCM in FID mode — e.g. use the FID / FirebaseInstallations for the header, or make the FirebaseInstanceIdInternal dependency optional and null-safe. Alternatively the backend should not let a legacy registration of the same app instance invalidate its FID registration.

Lenguaje dominante
Java
Estrellas
2.6k
Forks
733
Merge medio
2 d 15 h
PR fusionados (30 d)
72

Preparar el entorno

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de firebase/firebase-android-sdk

Todos los issues de firebase/firebase-android-sdk

Issues similares

Más issues de Java

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.