Skip to content

[AppCheck] Add getLimitedUseToken support to AppCheckProvider#8204

Open
rlazo wants to merge 9 commits into
mainfrom
rl.appcheck.limitedues
Open

[AppCheck] Add getLimitedUseToken support to AppCheckProvider#8204
rlazo wants to merge 9 commits into
mainfrom
rl.appcheck.limitedues

Conversation

@rlazo
Copy link
Copy Markdown
Contributor

@rlazo rlazo commented May 22, 2026

Introduced the getLimitedUseToken() method to the AppCheckProvider interface and implemented it across the debug, Play Integrity, and reCAPTCHA Enterprise providers. The implementation ensures that token exchange requests include a "limited_use" flag, allowing for the generation of short-lived, single-use App Check tokens.

Verified manually using debug provider

Introduced the getLimitedUseToken() method to the AppCheckProvider
interface and implemented it across the debug, Play Integrity, and
reCAPTCHA Enterprise providers. The implementation ensures that token
exchange requests include a "limited_use" flag, allowing for the
generation of short-lived, single-use App Check tokens.
@gemini-code-assist
Copy link
Copy Markdown
Contributor

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize the Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counterproductive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

@rlazo
Copy link
Copy Markdown
Contributor Author

rlazo commented May 22, 2026

/gemini review

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 22, 2026

📝 PRs merging into main branch

Our main branch should always be in a releasable state. If you are working on a larger change, or if you don't want this change to see the light of the day just yet, consider using a feature branch first, and only merge into the main branch when the code complete and ready to be released.

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request implements the getLimitedUseToken() method across the AppCheckProvider interface and its various implementations, including Debug, Play Integrity, and reCAPTCHA Enterprise. The changes include updating request objects to support the limited_use flag in JSON payloads and refactoring provider logic. Review feedback identified several improvement opportunities, such as correcting an incorrect class reference and duplicate assertions in ExchangeDebugTokenRequestTest, removing redundant stubbing in DefaultFirebaseAppCheckTest, and improving code clarity through parameter name comments and more idiomatic Truth assertions.

rlazo added 2 commits May 22, 2026 14:04
Added a fix for limited use token generation to App Check, Debug, and
Play Integrity changelogs. Also updated the debug testing SDK
changelog to reflect SDK version alignment.
@rlazo rlazo requested review from VinayGuthal, milaGGL and weixifan May 22, 2026 18:10
VinayGuthal
VinayGuthal previously approved these changes May 22, 2026
Copy link
Copy Markdown
Contributor

@VinayGuthal VinayGuthal left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fix failing tests source code changes look good

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants