Firebase Auth Requests Blocked (100% Unknown Origin) despite Correct SHA Fingerprints & Config Sync #6951
Description
Can we access your project?
- I give permission for members of the FlutterFlow team to access and test my project for the sole purpose of investigating this issue.
Current Behavior
I am experiencing a persistent "Requests from this Android client application are blocked" error during Phone Authentication. Despite correctly configuring SHA-1 and SHA-256 fingerprints, Firebase App Check metrics report 100% "Unknown Origin" requests.
Troubleshooting Steps Already Taken:
SHA Fingerprint Verification: Extracted SHA-1 and SHA-256 directly from the release APK and updated them in Firebase Project Settings and Google Cloud Console.
FlutterFlow Configuration: * Disabled "Manage outside of FlutterFlow" to allow manual control.
Triggered "Regenerate Config Files" multiple times to ensure sync.
Firebase Deployment: Performed a full "Deploy" from the FlutterFlow Firebase settings tab.
App Check Setup: Enabled Play Integrity and added the SHA-256 fingerprint in the App Check console. Currently, enforcement is set to "Unenforced" for testing, yet requests are still blocked.
General Settings: Verified that the "Support Email" is correctly set in Firebase Project Settings.
Current Status:
Even after these steps, the app fails to authenticate, and Firebase continues to mark traffic as unverified. This suggests a potential sync issue between the FlutterFlow-generated build and the Firebase project's backend authentication layer.
Expected Behavior
The user should receive an OTP or be able to sign in successfully.
Steps to Reproduce
Open the app on an Android device (Release APK).
Attempt to sign in via Phone Number or Google.
Observe the error: "Requests from this Android client application are blocked."
Reproducible from Blank
- The steps to reproduce above start from a blank project.
Bug Report Code (Required)
IT4oj8iBy5dIsepE1qrUKcBviSQQOVg1R7830MpBZywgfZzzBLN/fPfQP1tpXdekdGxqeVq2p14Ep/z3hdr9G/QoCE2tQN141KtfVQ/wUl2hSqmTF7meR3B6RNlPIVSs18PQvhImANZ1c1Zk2GeIIujJcAjZHb7PC0QwSq/LZO4=
Visual documentation
Environment
- FlutterFlow version: v4.1.81+
- Platform:Web Chrome
- Browser name and version:Chrome
- Operating system and version affected:Additional Information
Additional Information (Sabse Zaroori)
Yahan aapko wo baatein likhni hain jo maine itni der se aapko check karwayi hain. Ye text copy-paste kar do:
"The app is failing during Phone Authentication. I have already:
Added the SHA-1 and SHA-256 fingerprints to Firebase.
Regenerated Config Files in FlutterFlow.
Deployed Firebase rules and indexes.
Verified that App Check is showing 100% 'Unknown Origin'.
Even after these steps, I get the error: 'Requests from this Android client application are blocked'. Please check if my google-services.json is correctly synced with the latest SHA keys.