Google wallet generic pass upcoming notification - asp.net-core-webapi

I have integrated google wallet api with my .net core web app , the pass is displaying properly , but I need to know how to use the upcoming notification feature in the generic pass , I tried to understand it from the google wallet generic pass official documentation but it's not clear and I didn't get it .
If please anyone can clear up the things to me .
I tried to set enable notifications to true , but didn't work .

Related

Prevent front-end generated email sign-in links when generating and sending these via backend

I am using firebase admin sdk on the server to generate sign in links and send them out via custom SMTP api.
I just glanced at https://firebase.google.com/docs/auth/limits and I am well within these, but I believe there is nothing stopping a malicious third party from creating/requesting sign-in links via front end code. Is there a possibility to disable this functionality so it is only available to admin acc?
Additionally, I'd like some emails (i.e. multi factor enrolment) to not be possible, but again, given that someone can obtain some of my firebase front end details, they technically can send these?
You can restrict the API key from accessing an API (e.g. Identity Toolkit) but not disable a single method of the API for client.Sign up and delete user can be (that requires upgrading to Identity Platform) .
Firebase generates an API key when you add a web app. You can either update that or create a new key from API Credentials console.
You can then restrict what the API key in Firebase web config has access to:
However, Firebase Auth Client SDK will not work as Identity Toolkit is not selected. You'll have to proxy the requests through your backend and use a different key that can be used from your server's IP only.
Firebase Admin SDK will still be functional as usual so you can use that to perform other operations like updating/deleting users. You'll just have to write APIs on your backend for what could have been done using client SDK directly (or use Admin SDK when possible).
It might be a lot to update and I would not recommend unless you are facing rate limiting issues where Firebase Support should be able to help.

Why Google Cloud Console give No result found for Android Device Verification Api

I follow these steps in google cloud console :-
Google Cloud Console-> Select Our project -> Select API & Services -> Select Enable API & Services -> Search Android Device Verification API -> it gives "No Result Found"
why it gives this message while I want to enable Android Device Verification API feature. By Default Android Device Verification API does not show in API List on page Enable API & Services page and i want to include this feature in our project.
For another project when I search "Android Device Verification API" with above process it gives following error:-
There was an error while loading /apis/library/androidcheck.googleapis.com?project=chatme-342307. Please try again.
Request ID: 9929714032143206958
Kindly support above two problems.
First of all thanks for all viewing my question.
My problem has solved but i do not know it is exact answer or not.
I just remove app from project setting of my app in Firebase console then again create app in project setting and add with SHA1 and SHA256 then I search Android Device Verification it show in Result

Can I unverify users in firebase programmatically?

I want to unverify users that are verified, everytime they sign out in my app. This is to achieve the behaviour I want for my app using firebase SDK. But, somehow, I can't find any solution (If it's really possible) for that. Can anyone enlighten me? Thanks, BTW! :)
There is no API to set the emailVerified property of the current user profile to false in the client-side SDKs for Firebase Authentication.
What you can do though is modify the user profile by using the Admin SDK and set the property to false there.
Since the Admin SDK can only be used in trusted environments, it won't run in the client-side app, and you'll have to do this by making a custom API that your app can call. If you don't have an existing server where you can run this API, consider using a serverless solution like Cloud Functions or Cloud Run.

Unknown user in my firebase user authentication (Flutter/firebase)

I developed an app to test the google login feature using flutter and google authentication. The project is a closed project and only I have access to it. But recently I saw that there was a google sign in from an unknown Email ID. How did the user login without the build of my app? Has my account been hacked? What is going on?
Anyone with knowledge of your project's API Keys can access your Firebase Project using simple CURL Commands.
This is why it's a good idea to add restriction to those API Keys
In case you haven't, go to https://console.cloud.google.com and
Select your project
Click the menu icon at the top left (hamburger icon)
Go to API & Services and then credentials
You can view the APIs for your Google Cloud Project (linked to your Firebase Project) and then set restrictions for the API keys, refresh them or restrict access to specific platforms like Android or iOS.
You can also set restrictions on which components of Firebase the API key is allowed to access. For example, if your project doesn't require the use of Cloud Firestore, you can ensure that the API Key cannot be used to make calls to the Firestore Database
All said and done, I would still recommend that you shoot a mail to the Firebase Support team at https://firebase.google.com/support/troubleshooter/contact
To anyone still wondering about this:
If you provide a native google sign in and the registered
email adresses look like this:
karolynmccorkle.91842#gmail.com
normabrock.69306#gmail.com
guillermogeorge.53163#gmail.com
kylegomez.35423#gmail.com
opalbarrett.09499#gmail.com
they are probably test accounts used to generate Google Plays Pre-Launch reports.
You can read about it in the Play Console Help here.
If your app has a sign-in screen and you want the crawler to test the
sign-in process or the content behind it, you need to provide account
credentials.
Note that you do not need to provide credentials if your
app supports "Sign-in with Google,” which enables the crawler to log
in automatically.

Firebase and AppStore validation => Advertising

I'm going to submit my app to the AppStore and this is the first time I'm using Firebase in order to register analytics.
I only used Firebase/Core but there is still Advertising info in the POD :
grep -r advertisingIdentifier .
Binary file ./Pods/FirebaseAnalytics/Frameworks/frameworks/FirebaseAnalytics.framework/FirebaseAnalytics matches
And :
The AdSupport Framework is not currently linked.
I already got some apps refused because of Advertising using GoogleAnalytics, should I worry using Firebase and submitting my application ? Have you ever been rejected because of this ? Do you have any advice to prevent a rejection ?
Thanks.
Ok validation has passed with "NO" for IDFA

Resources