Post v1+app:exchangedevicechecktoken — firebaseappcheck

v1

latestOpenAPI 3.0.0Creative Commons Attribution 3.02026-07-13274687.3 KB

projects

Accepts a device_token issued by DeviceCheck, and attempts to validate it with Apple. If valid, returns an AppCheckToken.

post/v1/{+app}:exchangeDeviceCheckToken

Path parameters

appstring required

Required. The relative resource name of the iOS app, in the format: projects/{project_number}/apps/{app_id} If necessary, the project_number element can be replaced with the project ID of the Firebase project. Learn more about using project identifiers in Google's AIP 2510 standard.

Request body

deviceTokenstring

Required. The device_token as returned by Apple's client-side DeviceCheck API. This is the base64 encoded Data (Swift) or NSData (ObjC) object.

limitedUseboolean

Specifies whether this attestation is for use in a limited use (true) or session based (false) context. To enable this attestation to be used with the replay protection feature, set this to true. The default value is false.

Response

Successful response