AppCheck not working on new iPhone 14

[ian-sayles]

Description

When AppCheck was released we updated our app to use it, and its been working perfectly.

But just recently when some of our customers have upgraded their phones to the new iPhone14 when they run our app it does not show any data from Firestore, when on older phone it did.

The app as min 15.0.0 iOS set, and don't think its an iOS version issue, for older phones running iOS 16.1.2 work ok.

Checking the App Check API for Cloud Firestore it does show "unverified: invalid requests" when the user run our app.

What is strange if I connect the iPhone to my computer and run the app from Xcode it does work ok.
This is using a different firebase project than the production app from the App Store, but both projects are configured the same.

Does AppCheck support the latest phones from Apple?

Reproducing the issue

Code in app

let providerFactory = YourAppCheckProviderFactory()
AppCheck.setAppCheckProviderFactory(providerFactory)

class YourAppCheckProviderFactory: NSObject, AppCheckProviderFactory {
func createProvider(with app: FirebaseApp) -> AppCheckProvider? {
return AppAttestProvider(app: app)
}
}

Firebase SDK Version

9.6.0

Xcode Version

14.1

Installation Method

Swift Package Manager

Firebase Product(s)

App Check

Targeted Platforms

iOS

Relevant Log Output

No response

If using Swift Package Manager, the project's Package.resolved

Expand Package.resolved snippet

Replace this line with the contents of your Package.resolved.

If using CocoaPods, the project's Podfile.lock

Expand Podfile.lock snippet

Replace this line with the contents of your Podfile.lock!

[google-oss-bot]

I couldn't figure out how to label this issue, so I've labeled it for a human to triage. Hang tight.

[ncooke3]

Hi @ian-sayles, sorry for the trouble. Just to confirm, you're able to reproduce the following behavior:

• Verify that AppCheck does not work when running your app on physical iPhone 14
• Verify that AppCheck does work when deploying an app (that uses a different firebase project) onto the same iPhone 14 via connecting it your computer

[ian-sayles]

Verify that AppCheck does not work when running your app on physical iPhone 14

• Yes, when they sign into the app on a iPhone they can't view any data from FireStore
• Same login on an older phone they can see their data in FireStore.
• We have also just purchased a new iPhone 14 (not a Pro model) and with a different account to our customer and experienced the same issue, on any other phone can see Firestore data, on the iPhone14 nothing.

Verify that AppCheck does work when deploying an app (that uses a different firebase project) onto the same iPhone 14 via connecting it your computer

• Yes, when using our new iPhone14, data from FireStore is shown with no issues.

[ncooke3]

Thanks, have you tried running each scenario with debug logging on? You can set -FIRDebugEnabled as a launch argument in the scheme editor.

I'd be curious if this help surface what the difference is between the two scenarios.

[ian-sayles]

I have switched on the -FIRDebugEnabled and also changed the app to use the production Google-Service-Info file so it is the same as the app from the app store.
When debug the app, we can see data from the Firestore database on the iPhone 14, as we could before when using the development firebase project.

So the issue seems to be when using the released app from the App Store on a iPhone 14.
Is there anywhere to view debug in the Google Cloud console for App Check?

[ncooke3]

Thanks @ian-sayles. There isn't anywhere to view debug info in the console for App Check.

Just to verify, when you said:

Verify that AppCheck does work when deploying an app (that uses a different firebase project) onto the same iPhone 14 via connecting it your computer

Yes, when using our new iPhone14, data from FireStore is shown with no issues.

Were you using debug tokens or a real attestation provider?

[ian-sayles]

When the phone is connected to my computer it shows data from Firestore when using either my development or production firebase projects.

The same phone when using the app download from the App Store, does not show any data from Firestore.

The following is the code for AppCheck:

let providerFactory = YourAppCheckProviderFactory()
AppCheck.setAppCheckProviderFactory(providerFactory)

class YourAppCheckProviderFactory: NSObject, AppCheckProviderFactory {
func createProvider(with app: FirebaseApp) -> AppCheckProvider? {
return AppAttestProvider(app: app)
}
}