执行Firebase应用检查后，如何从Nodejs Admin SDK访问Firebase数据库

发布于 2025-02-10 18:58:20 字数 1090 浏览 1 评论 0原文

我已经启用了 firebase应用程序检查在我的项目中，以确保所有请求仅来自我们的应用程序。到目前为止，这一直运行良好（使用Recaptachav3作为Web的证明提供商）。但是，我想从我的后端nodejs服务器访问数据库（RTDB）。我正在使用带有服务帐户的Firebase-Admin-SDK。但是我无法做到。

const { initializeApp, applicationDefault } = require('firebase-admin/app');
const { getDatabase } = require('firebase-admin/database');

const app = initializeApp({
  credential: applicationDefault(),
  databaseURL: '********',
});

const db = getDatabase(app);

const ref = db.ref('/some-path');
ref.once('value', (snapshot) => {
  console.log(snapshot.val());
});

下面的错误是付出

[2022-06-27T09：42：25.299Z] @firebase/database：firebase警告：缺少appCheck token（https://qtalkproject.fire.firebaseio.com/

）仅检查客户？ Firebase不应该允许所有来自服务帐户的请求吗？为什么要要求应用程序检查令牌？ acc到 documentation 允许firebase-admin-sdk创建应用程序检查令牌。如果允许创建应用程序检查令牌，是否意味着它已经被认证？为什么我不能从同一admin SDK访问数据库？我在这里错过了什么吗？

原文

I have enabled Firebase App Check in my project to ensure all requests are coming only from our app. That has been working well till now (Using RecaptachaV3 as a Attestation Provider for web). However I want to access the database (rtdb) from my backend nodejs server. I'm using the firebase-admin-sdk with a service account for it. But I am unable to do it.

const { initializeApp, applicationDefault } = require('firebase-admin/app');
const { getDatabase } = require('firebase-admin/database');

const app = initializeApp({
  credential: applicationDefault(),
  databaseURL: '********',
});

const db = getDatabase(app);

const ref = db.ref('/some-path');
ref.once('value', (snapshot) => {
  console.log(snapshot.val());
});

Below error is thrown

[2022-06-27T09:42:25.299Z] @firebase/database: FIREBASE WARNING: Missing appcheck token (https://qtalkproject.firebaseio.com/)

Isn't app check only for clients? Shouldn't firebase allow all requests that are coming from a service account? Why is it asking for an app check token? Acc to the documentation the firebase-admin-sdk is allowed to create app check tokens. If it is allowed to create app check tokens, doesn't it mean it is already authenticated? Why can't I access the database from the same admin sdk then? Am I missing something here?

分享到QQ

分享到微博