@firebase/app-check 0.13.0 → 0.13.1-20260818172054

package/dist/esm/index.esm.js

@@ -569,7 +569,7 @@ function writeTokenToStorage(app, token) {
     }
     return Promise.resolve();
 }
-async function readOrCreateDebugTokenFromStorage() {
+async function readOrCreateDebugTokenFromStorage(app) {
     /**
      * Theoretically race condition can happen if we read, then write in 2 separate transactions.
      * But it won't happen here, because this function will be called exactly once.
@@ -585,6 +585,27 @@ async function readOrCreateDebugTokenFromStorage() {
         // create a new debug token
         // This function is only available in secure contexts. See https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts
         const newToken = crypto.randomUUID();
+        let message = `To use this token for app debugging, register it with your project.\n\n` +
+            `Firebase App Check debug token: ${newToken}\n\n`;
+        const appId = app?.options.appId;
+        const projectId = app?.options.projectId;
+        if (projectId && appId) {
+            message +=
+                `You can do so in the Firebase Console:\n` +
+                    `https://console.firebase.google.com/project/${projectId}/appcheck/apps?selectedAppId=${appId}\n\n` +
+                    `Or using the Firebase CLI:\n` +
+                    `firebase appcheck:debugtokens:create ${newToken} --project ${projectId} --app ${appId}\n\n`;
+        }
+        else {
+            message += `You will need to add it to your app's App Check settings in the Firebase Console for it to work.\n\n`;
+        }
+        message +=
+            `Note: To keep your project secure, please revoke and delete this token using the\n` +
+                `Firebase Console or the CLI (\`firebase appcheck:debugtokens:delete\`) when you finish debugging.\n\n` +
+                `Warning: This debug token is a secret and should not be shared or uploaded to source code.\n\n` +
+                `Debug Token Guide: https://firebase.google.com/docs/app-check/web/debug-provider\n` +
+                `Firebase CLI install instructions: https://firebase.google.com/docs/cli\n`;
+        console.log(message);
         // We don't need to block on writing to indexeddb
         // In case persistence failed, a new debug token will be generated every time the page is refreshed.
         // It renders the debug token useless because you have to manually register(whitelist) the new token in the firebase console again and again.
@@ -630,7 +651,7 @@ async function getDebugToken() {
         `);
     }
 }
-function initializeDebugMode() {
+function initializeDebugMode(app) {
     const globals = getGlobal();
     const debugState = getDebugState();
     // Set to true if this function has been called, whether or not
@@ -647,7 +668,7 @@ function initializeDebugMode() {
         deferredToken.resolve(globals.FIREBASE_APPCHECK_DEBUG_TOKEN);
     }
     else {
-        deferredToken.resolve(readOrCreateDebugTokenFromStorage());
+        deferredToken.resolve(readOrCreateDebugTokenFromStorage(app));
     }
 }
 
@@ -1048,7 +1069,7 @@ function internalFactory(appCheck) {
 }
 
 const name = "@firebase/app-check";
-const version = "0.13.0";
+const version = "0.13.1-20260818172054";
 
 /**
  * @license
@@ -1490,15 +1511,16 @@ function initializeAppCheck(app = getApp(), options) {
     const provider = _getProvider(app, 'app-check');
     // Ensure initializeDebugMode() is only called once.
     if (!getDebugState().initialized) {
-        initializeDebugMode();
+        initializeDebugMode(app);
     }
     // Log a message containing the debug token when `initializeAppCheck()`
     // is called in debug mode.
     if (isDebugMode()) {
         // Do not block initialization to get the token for the message.
-        void getDebugToken().then(token => 
-        // Not using logger because I don't think we ever want this accidentally hidden.
-        console.log(`App Check debug token: ${token}. You will need to add it to your app's App Check settings in the Firebase console for it to work.`));
+        void getDebugToken().then(token => {
+            // Not using logger because I don't think we ever want this accidentally hidden.
+            console.log(`Firebase App Check debug token: ${token}`);
+        });
     }
     if (provider.isInitialized()) {
         const existingInstance = provider.getImmediate();