Skip to content

BCLOUD-14839: Add client attestation support. SetAppCheckToken and Se… - #397

Open
pierrepbitheads wants to merge 4 commits into
developfrom
pierrep/BCLOUD-14839
Open

pierrepbitheads wants to merge 4 commits into
developfrom
pierrep/BCLOUD-14839

Conversation

@pierrepbitheads

@pierrepbitheads pierrepbitheads commented Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

BCLOUD-14839: Added client attestation support to csharp library. SetAppCheckToken and SetAppCheckTokenProvider methods.

Runtime outputs for the various tests:

Valid - Token provider
Apple App Attest - device
SDK provider will request a fresh Firebase token before authentication.

Success log:
Status: 200 Reason: 0
Valid token accepted. Repeat Valid to verify saved identity.

Failure log:
Status: 900 Reason: 90001
Timeout trying to reach brainCloud server


Omitted - Token provider
Apple App Attest - device
Firebase bypassed; provider removed. Testing backend enforcement.

Success log:
Status: 403 Reason: 40300
Processing exception (message): App Check Token is required

Failure log:
Status: 900 Reason: 90001
Timeout trying to reach brainCloud server


Invalid - Token provider
Apple App Attest - device
Firebase bypassed; provider removed. Testing backend enforcement.

Success log:
Status: 403 Reason: 40300
Processing exception (message): Invalid App Check Token

Failure log:
Status: 900 Reason: 90001
Timeout trying to reach brainCloud server


Valid - Token setter
Apple App Attest - device
Fetching a fresh Firebase token for SetAppCheckToken...

Success log:
Status: 200 Reason: 0
Valid token accepted. Repeat Valid to verify saved identity.

Failure log:
Status: 900 Reason: 90001
Timeout trying to reach brainCloud server


Omitted - Token setter
Apple App Attest - device
Firebase bypassed; provider removed. Testing backend enforcement.

Success log:
Status: 403 Reason: 40300
Processing exception (message): App Check Token is required

Failure log:
Status: 900 Reason: 90001
Timeout trying to reach brainCloud server


Invalid - Token setter
Apple App Attest - device
Firebase bypassed; provider removed. Testing backend enforcement.

Success log:
Status: 403 Reason: 40300
Processing exception (message): Invalid App Check Token

Failure log:
Status: 900 Reason: 90001
Timeout trying to reach brainCloud server

@michaelc-bitheads michaelc-bitheads left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have several comments... also C.C. @stevemrjones to see if he agrees with me about some of my stronger opinions, such as the README and TestAppCheck.

Comment thread BrainCloudClient/Assets/BrainCloud/Client/BrainCloud/BrainCloudAuthentication.cs Outdated
Comment thread BrainCloudClient/tests/TestAppCheck.cs Outdated
Comment thread README.md
Comment thread README.md Outdated
@michaelc-bitheads

Copy link
Copy Markdown
Contributor

Also are there any logs about this? What does the success and failure callback look like? That should be posted in the main body of the PR.

@pierrepbitheads

Copy link
Copy Markdown
Contributor Author

Added output logs to the PR description for the various tests.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants