Firebase Admin Java SDK should bypass App Check for RTDB operations

Open

#704 opened on Jul 29, 2022 3 comments 2 reactions 1 assignee View on GitHub

@lahirumaramba is already working on this.

Since Jul 29, 2022.

Assessment

This issue has not been assessed yet.

Description

api: appcheck

Moved from: https://github.com/firebase/firebase-android-sdk/issues/3952

It seems like the Admin SDK does not currently bypass App Check see: https://stackoverflow.com/questions/73105469/firebase-admins-sdk-and-app-check-safetynet

We might need a fix similar to https://github.com/firebase/firebase-js-sdk/commit/99414a51ca5cd25f69a96e4c9949ad5b84e3f64e#diff-ddbaa9e762a6010e5a0aa0c8048d48deea15594f14caa3d51e68b283f36e489fR170 in the Java SDK as well. Creating this issue to continue the investigation.

Dominant language: Java
Stars: 620
Forks: 305
Avg merge: 4d 9h
Merged PRs (30d): 4

Contributor guide

Open the contributing guide

First steps

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.

More from firebase/firebase-admin-java

google-http-client-jackson2 cannot be excluded even when a JsonFactory is configured via FirebaseOptions Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

firebase/firebase-admin-java#1231 · Opened Aug 10, 2026
High Severity CVE in transitive dependency `jackson-core` Open

api: core

firebase/firebase-admin-java#1198 · 3 comments · 1 assignee · Opened Mar 18, 2026
[BUG] RemoteConfig unit tests fail in non-English (e.g., Korean) Locales due to Date Parsing Open

api: remoteconfig

firebase/firebase-admin-java#1196 · 1 comment · 2 assignees · Opened Mar 12, 2026
Auth list tenants is not pageable Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

firebase/firebase-admin-java#1192 · 3 comments · Opened Mar 5, 2026
[FR] Support generateVerifyAndChangeEmailLink Open

needs-triage type: feature request

Difficulty 3/5 1-2 days Newbie friendliness 45/100

firebase/firebase-admin-java#1149 · 1 comment · Opened Nov 17, 2025

All issues in firebase/firebase-admin-java

Similar issues

[Bug][UI] Change the method of opening the Action Detail Open

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

Netcracker/qubership-integration-platform#913 · Opened Sep 23, 2026
SEC-CORS-006 declares MEDIUM but can only emit HIGH or LOW Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

jdubois/boot-ui#1100 · Opened Sep 23, 2026
build-scan-xunit: accept ISO offset timestamps in test reports Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

elastic/gradle-plugins#157 · Opened Sep 23, 2026
OpenAPI document marks optional request body of `PUT /api/users/me` as required Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

cryptomator/hub#497 · Opened Sep 23, 2026
No test covers the claim that only the last command's state is checked Open

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

johanhaleby/occurrent#1120 · Opened Sep 23, 2026

More Java issues

A short digest of beginner-friendly GitHub issues.