@react-native-firebase/app-check 26.4.0 → 27.1.0

package/ios/RNFBAppCheck/RNFBAppCheckModule.mm

@@ -15,29 +15,18 @@
  *
  */
 
-#if __has_include(<Firebase/Firebase.h>)
-#import <Firebase/Firebase.h>
-#elif __has_include(<FirebaseAppCheck/FirebaseAppCheck.h>)
-#import <FirebaseAppCheck/FirebaseAppCheck.h>
-#import <FirebaseCore/FirebaseCore.h>
-#else
-@import FirebaseCore;
-@import FirebaseAppCheck;
-#endif
-
+// This module intentionally has no Firebase imports -- see RNFBAppCheckHelper.h /
+// RNFBAppCheckModule.h for why. Every Firebase App Check SDK call is routed through
+// the plain Objective-C RNFBAppCheckHelper class instead, which can safely
+// `@import FirebaseAppCheck` (and import RNFBAppCheck-Swift.h for the reject-code
+// mapper) because it compiles as ObjC, not ObjC++.
 #import <React/RCTInvalidating.h>
-#import <React/RCTUtils.h>
 
-#import "RNFBApp/RCTConvert+FIRApp.h"
-#import "RNFBApp/RNFBSharedUtils.h"
+#import "RNFBAppCheckHelper.h"
 #import "RNFBAppCheckModule.h"
-#import "RNFBAppCheckProviderFactory.h"
 #import "RNFBAppCheckTurboModules.h"
 
 @interface RNFBAppCheckModule () <NativeRNFBTurboAppCheckSpec, RCTInvalidating>
-
-@property RNFBAppCheckProviderFactory *_Nullable providerFactory;
-
 @end
 
 @implementation RNFBAppCheckModule
@@ -58,8 +47,7 @@ RCT_EXPORT_MODULE(NativeRNFBTurboAppCheck)
   __strong static RNFBAppCheckModule *sharedInstance;
   dispatch_once(&once, ^{
     sharedInstance = [[RNFBAppCheckModule alloc] init];
-    sharedInstance.providerFactory = [[RNFBAppCheckProviderFactory alloc] init];
-    [FIRAppCheck setAppCheckProviderFactory:sharedInstance.providerFactory];
+    [RNFBAppCheckHelper ensureProviderFactoryInstalled];
   });
   return sharedInstance;
 }
@@ -72,16 +60,11 @@ RCT_EXPORT_MODULE(NativeRNFBTurboAppCheck)
     isTokenAutoRefreshEnabled:(BOOL)isTokenAutoRefreshEnabled
                       resolve:(RCTPromiseResolveBlock)resolve
                        reject:(RCTPromiseRejectBlock)reject {
-  FIRApp *firebaseApp = [RCTConvert firAppFromString:appName];
-  DLog(@"deprecated API, provider will be deviceCheck / token refresh %d for app %@",
-       isTokenAutoRefreshEnabled, firebaseApp.name);
-  [[RNFBAppCheckModule sharedInstance].providerFactory configure:firebaseApp
-                                                    providerName:@"deviceCheck"
-                                                      debugToken:nil];
-
-  FIRAppCheck *appCheck = [FIRAppCheck appCheckWithApp:firebaseApp];
-  appCheck.isTokenAutoRefreshEnabled = isTokenAutoRefreshEnabled;
-  resolve([NSNull null]);
+  [RNFBAppCheckHelper activate:appName
+                siteKeyProvider:siteKeyProvider
+      isTokenAutoRefreshEnabled:isTokenAutoRefreshEnabled
+                        resolve:resolve
+                         reject:reject];
 }
 
 - (void)configureProvider:(NSString *)appName
@@ -89,152 +72,36 @@ RCT_EXPORT_MODULE(NativeRNFBTurboAppCheck)
                debugToken:(NSString *)debugToken
                   resolve:(RCTPromiseResolveBlock)resolve
                    reject:(RCTPromiseRejectBlock)reject {
-  FIRApp *firebaseApp = [RCTConvert firAppFromString:appName];
-  DLog(@"appName/providerName/debugToken: %@/%@/%@", firebaseApp.name, providerName,
-       (debugToken == nil ? @"null" : @"(not shown)"));
-  @try {
-    [[RNFBAppCheckModule sharedInstance].providerFactory configure:firebaseApp
-                                                      providerName:providerName
-                                                        debugToken:debugToken];
-    resolve([NSNull null]);
-  } @catch (NSException *exception) {
-    [RNFBSharedUtils rejectPromiseWithUserInfo:reject
-                                      userInfo:(NSMutableDictionary *)@{
-                                        @"code" : @"unknown",
-                                        @"message" : exception.reason ?: @"internal-error",
-                                      }];
-  }
+  [RNFBAppCheckHelper configureProvider:appName
+                           providerName:providerName
+                             debugToken:debugToken
+                                resolve:resolve
+                                 reject:reject];
 }
 
 - (void)setTokenAutoRefreshEnabled:(NSString *)appName
          isTokenAutoRefreshEnabled:(BOOL)isTokenAutoRefreshEnabled {
-  FIRApp *firebaseApp = [RCTConvert firAppFromString:appName];
-  DLog(@"app/isTokenAutoRefreshEnabled: %@/%d", firebaseApp.name, isTokenAutoRefreshEnabled);
-  FIRAppCheck *appCheck = [FIRAppCheck appCheckWithApp:firebaseApp];
-  appCheck.isTokenAutoRefreshEnabled = isTokenAutoRefreshEnabled;
+  [RNFBAppCheckHelper setTokenAutoRefreshEnabled:appName
+                       isTokenAutoRefreshEnabled:isTokenAutoRefreshEnabled];
 }
 
 - (void)isTokenAutoRefreshEnabled:(NSString *)appName
                           resolve:(RCTPromiseResolveBlock)resolve
                            reject:(RCTPromiseRejectBlock)reject {
-  FIRApp *firebaseApp = [RCTConvert firAppFromString:appName];
-  FIRAppCheck *appCheck = [FIRAppCheck appCheckWithApp:firebaseApp];
-  BOOL isTokenAutoRefreshEnabled = appCheck.isTokenAutoRefreshEnabled;
-  DLog(@"app/isTokenAutoRefreshEnabled: %@/%d", firebaseApp.name, isTokenAutoRefreshEnabled);
-  resolve([NSNumber numberWithBool:isTokenAutoRefreshEnabled]);
-}
-
-// AppCheck-AD-8: map pending fail-closed to provider-not-ready (not token-error).
-// Walk NSUnderlyingErrorKey because FIRAppCheck wraps non-SDK errors via
-// publicDomainErrorWithError: and drops top-level userInfo[@"code"].
-// Locked message: kRNFBAppCheckProviderNotReadyMessage (RNFBAppCheckProvider.h).
-static NSString *RNFBAppCheckRejectCodeForError(NSError *error) {
-  NSError *current = error;
-  while (current != nil) {
-    id code = current.userInfo[@"code"];
-    if ([code isKindOfClass:[NSString class]] && [code isEqualToString:@"provider-not-ready"]) {
-      return @"provider-not-ready";
-    }
-    current = current.userInfo[NSUnderlyingErrorKey];
-    if (![current isKindOfClass:[NSError class]]) {
-      break;
-    }
-  }
-  return @"token-error";
-}
-
-// AppCheck-AD-8 durable path: reject before FIRAppCheck token APIs when the
-// factory-held facade still has a nil delegateProvider (pending / not configured).
-static BOOL RNFBAppCheckRejectIfProviderNotReady(FIRApp *firebaseApp,
-                                                 RCTPromiseRejectBlock reject) {
-  RNFBAppCheckProviderFactory *factory = [RNFBAppCheckModule sharedInstance].providerFactory;
-  RNFBAppCheckProvider *provider = [factory providerForApp:firebaseApp];
-  if (provider != nil && provider.delegateProvider != nil) {
-    return NO;
-  }
-  DLog(@"RNFBAppCheck - provider not ready for app %@ (delegateProvider nil)", firebaseApp.name);
-  [RNFBSharedUtils rejectPromiseWithUserInfo:reject
-                                    userInfo:(NSMutableDictionary *)@{
-                                      @"code" : @"provider-not-ready",
-                                      @"message" : kRNFBAppCheckProviderNotReadyMessage,
-                                    }];
-  return YES;
+  [RNFBAppCheckHelper isTokenAutoRefreshEnabled:appName resolve:resolve reject:reject];
 }
 
 - (void)getToken:(NSString *)appName
     forceRefresh:(BOOL)forceRefresh
          resolve:(RCTPromiseResolveBlock)resolve
           reject:(RCTPromiseRejectBlock)reject {
-  FIRApp *firebaseApp = [RCTConvert firAppFromString:appName];
-  DLog(@"appName %@", firebaseApp.name);
-  if (RNFBAppCheckRejectIfProviderNotReady(firebaseApp, reject)) {
-    return;
-  }
-  FIRAppCheck *appCheck = [FIRAppCheck appCheckWithApp:firebaseApp];
-  [appCheck
-      tokenForcingRefresh:forceRefresh
-               completion:^(FIRAppCheckToken *_Nullable token, NSError *_Nullable error) {
-                 if (error != nil) {
-                   DLog(@"RNFBAppCheck - getToken - Unable to retrieve App Check token: %@", error);
-                   NSString *code = RNFBAppCheckRejectCodeForError(error);
-                   [RNFBSharedUtils rejectPromiseWithUserInfo:reject
-                                                     userInfo:(NSMutableDictionary *)@{
-                                                       @"code" : code,
-                                                       @"message" : [error localizedDescription],
-                                                     }];
-                   return;
-                 }
-                 if (token == nil) {
-                   DLog(@"RNFBAppCheck - getToken - Unable to retrieve App Check token.");
-                   [RNFBSharedUtils rejectPromiseWithUserInfo:reject
-                                                     userInfo:(NSMutableDictionary *)@{
-                                                       @"code" : @"token-null",
-                                                       @"message" : @"no token fetched",
-                                                     }];
-                   return;
-                 }
-
-                 NSMutableDictionary *tokenResultDictionary = [NSMutableDictionary new];
-                 tokenResultDictionary[@"token"] = token.token;
-                 resolve(tokenResultDictionary);
-               }];
+  [RNFBAppCheckHelper getToken:appName forceRefresh:forceRefresh resolve:resolve reject:reject];
 }
 
 - (void)getLimitedUseToken:(NSString *)appName
                    resolve:(RCTPromiseResolveBlock)resolve
                     reject:(RCTPromiseRejectBlock)reject {
-  FIRApp *firebaseApp = [RCTConvert firAppFromString:appName];
-  DLog(@"appName %@", firebaseApp.name);
-  if (RNFBAppCheckRejectIfProviderNotReady(firebaseApp, reject)) {
-    return;
-  }
-  FIRAppCheck *appCheck = [FIRAppCheck appCheckWithApp:firebaseApp];
-  [appCheck limitedUseTokenWithCompletion:^(FIRAppCheckToken *_Nullable token,
-                                            NSError *_Nullable error) {
-    if (error != nil) {
-      DLog(@"RNFBAppCheck - getLimitedUseToken - Unable to retrieve App Check token: %@", error);
-      NSString *code = RNFBAppCheckRejectCodeForError(error);
-      [RNFBSharedUtils rejectPromiseWithUserInfo:reject
-                                        userInfo:(NSMutableDictionary *)@{
-                                          @"code" : code,
-                                          @"message" : [error localizedDescription],
-                                        }];
-      return;
-    }
-    if (token == nil) {
-      DLog(@"RNFBAppCheck - getLimitedUseToken - Unable to retrieve App Check token.");
-      [RNFBSharedUtils rejectPromiseWithUserInfo:reject
-                                        userInfo:(NSMutableDictionary *)@{
-                                          @"code" : @"token-null",
-                                          @"message" : @"no token fetched",
-                                        }];
-      return;
-    }
-
-    NSMutableDictionary *tokenResultDictionary = [NSMutableDictionary new];
-    tokenResultDictionary[@"token"] = token.token;
-    resolve(tokenResultDictionary);
-  }];
+  [RNFBAppCheckHelper getLimitedUseToken:appName resolve:resolve reject:reject];
 }
 
 - (void)addAppCheckListener:(NSString *)appName {

package/ios/RNFBAppCheck/RNFBAppCheckRejectCodeMapper.swift

@@ -0,0 +1,50 @@
+/**
+ * Copyright (c) 2016-present Invertase Limited & Contributors
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this library except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import Foundation
+
+/**
+ * Maps token-fetch `NSError` chains to JS reject codes previously assembled
+ * inline in `RNFBAppCheckModule.mm` (`RNFBAppCheckRejectCodeForError`).
+ *
+ * AppCheck-AD-8 contracts:
+ * - Walk `userInfo[@"code"]` and `NSUnderlyingErrorKey` (FIRAppCheck wraps
+ *   non-SDK errors and may drop the top-level code)
+ * - Return `provider-not-ready` if any level has that string code
+ * - Else return `token-error`
+ *
+ * Foundation-only so unit tests do not link Firebase App Check.
+ */
+@objc(RNFBAppCheckRejectCodeMapper)
+public final class RNFBAppCheckRejectCodeMapper: NSObject {
+  /// Pre-port `RNFBAppCheckRejectCodeForError`.
+  @objc(rejectCodeForError:)
+  public static func rejectCode(for error: NSError?) -> NSString {
+    var current: NSError? = error
+    while let err = current {
+      if let code = err.userInfo["code"] as? String, code == "provider-not-ready" {
+        return "provider-not-ready" as NSString
+      }
+      let underlying = err.userInfo[NSUnderlyingErrorKey]
+      if let next = underlying as? NSError {
+        current = next
+      } else {
+        break
+      }
+    }
+    return "token-error" as NSString
+  }
+}

package/ios/RNFBAppCheck.xcodeproj/project.pbxproj

@@ -8,6 +8,8 @@
 
 /* Begin PBXBuildFile section */
 		2744B98621F45429004F8E3F /* RNFBAppCheckModule.mm in Sources */ = {isa = PBXBuildFile; fileRef = 2744B98521F45429004F8E3F /* RNFBAppCheckModule.mm */; };
+		RNFBAC000000000000000001 /* RNFBAppCheckRejectCodeMapper.swift in Sources */ = {isa = PBXBuildFile; fileRef = RNFBAC000000000000000002 /* RNFBAppCheckRejectCodeMapper.swift */; };
+		RNFBAC000000000000000003 /* RNFBAppCheckHelper.m in Sources */ = {isa = PBXBuildFile; fileRef = RNFBAC000000000000000005 /* RNFBAppCheckHelper.m */; };
 /* End PBXBuildFile section */
 
 /* Begin PBXCopyFilesBuildPhase section */
@@ -26,6 +28,9 @@
 		2744B98221F45429004F8E3F /* libRNFBAppCheck.a */ = {isa = PBXFileReference; explicitFileType = archive.ar; includeInIndex = 0; path = libRNFBAppCheck.a; sourceTree = BUILT_PRODUCTS_DIR; };
 		2744B98421F45429004F8E3F /* RNFBAppCheckModule.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; name = RNFBAppCheckModule.h; path = RNFBAppCheck/RNFBAppCheckModule.h; sourceTree = SOURCE_ROOT; };
 		2744B98521F45429004F8E3F /* RNFBAppCheckModule.mm */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.cpp.objcpp; name = RNFBAppCheckModule.mm; path = RNFBAppCheck/RNFBAppCheckModule.mm; sourceTree = SOURCE_ROOT; };
+		RNFBAC000000000000000002 /* RNFBAppCheckRejectCodeMapper.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; name = RNFBAppCheckRejectCodeMapper.swift; path = RNFBAppCheck/RNFBAppCheckRejectCodeMapper.swift; sourceTree = SOURCE_ROOT; };
+		RNFBAC000000000000000004 /* RNFBAppCheckHelper.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; name = RNFBAppCheckHelper.h; path = RNFBAppCheck/RNFBAppCheckHelper.h; sourceTree = SOURCE_ROOT; };
+		RNFBAC000000000000000005 /* RNFBAppCheckHelper.m */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.objc; name = RNFBAppCheckHelper.m; path = RNFBAppCheck/RNFBAppCheckHelper.m; sourceTree = SOURCE_ROOT; };
 /* End PBXFileReference section */
 
 /* Begin PBXFrameworksBuildPhase section */
@@ -54,6 +59,9 @@
 				2744B98C21F45C64004F8E3F /* common */,
 				2744B98421F45429004F8E3F /* RNFBAppCheckModule.h */,
 				2744B98521F45429004F8E3F /* RNFBAppCheckModule.mm */,
+				RNFBAC000000000000000004 /* RNFBAppCheckHelper.h */,
+				RNFBAC000000000000000005 /* RNFBAppCheckHelper.m */,
+				RNFBAC000000000000000002 /* RNFBAppCheckRejectCodeMapper.swift */,
 			);
 			path = RNFBAppCheck;
 			sourceTree = "<group>";
@@ -125,6 +133,8 @@
 			buildActionMask = 2147483647;
 			files = (
 				2744B98621F45429004F8E3F /* RNFBAppCheckModule.mm in Sources */,
+				RNFBAC000000000000000003 /* RNFBAppCheckHelper.m in Sources */,
+				RNFBAC000000000000000001 /* RNFBAppCheckRejectCodeMapper.swift in Sources */,
 			);
 			runOnlyForDeploymentPostprocessing = 0;
 		};
@@ -150,6 +160,7 @@
 				CODE_SIGN_STYLE = Automatic;
 				COPY_PHASE_STRIP = NO;
 				DEBUG_INFORMATION_FORMAT = dwarf;
+				DEFINES_MODULE = YES;
 				GCC_C_LANGUAGE_STANDARD = gnu11;
 				GCC_DYNAMIC_NO_PIC = NO;
 				GCC_OPTIMIZATION_LEVEL = 0;
@@ -166,6 +177,7 @@
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				SDKROOT = iphoneos;
 				SKIP_INSTALL = YES;
+				SWIFT_VERSION = 5.10;
 				TARGETED_DEVICE_FAMILY = "1,2";
 			};
 			name = Debug;
@@ -189,6 +201,7 @@
 				CODE_SIGN_STYLE = Automatic;
 				COPY_PHASE_STRIP = NO;
 				DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym";
+				DEFINES_MODULE = YES;
 				ENABLE_NS_ASSERTIONS = NO;
 				GCC_C_LANGUAGE_STANDARD = gnu11;
 				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
@@ -200,6 +213,7 @@
 				PRODUCT_NAME = "$(TARGET_NAME)";
 				SDKROOT = iphoneos;
 				SKIP_INSTALL = YES;
+				SWIFT_VERSION = 5.10;
 				TARGETED_DEVICE_FAMILY = "1,2";
 				VALIDATE_PRODUCT = YES;
 			};

package/ios/RNFBAppCheckUnitTests/HostStubs/Firebase/FIRAppCheckHostStub.m

@@ -0,0 +1,109 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ */
+#import <Firebase/Firebase.h>
+
+@implementation FIRApp
+
+- (instancetype)initWithName:(NSString *)name {
+  self = [super init];
+  if (self) {
+    _name = [name copy];
+  }
+  return self;
+}
+
+@end
+
+@implementation FIRAppCheckToken {
+  NSString *_token;
+}
+
+- (instancetype)initWithToken:(NSString *)token {
+  self = [super init];
+  if (self) {
+    _token = [token copy];
+  }
+  return self;
+}
+
+- (NSString *)token {
+  return _token;
+}
+
+@end
+
+@implementation FIRAppCheck
+
+static id<FIRAppCheckProviderFactory> sFactory;
+static void (^sTokenForcingRefreshHandler)(BOOL, FIRAppCheckTokenCompletionBlock);
+static void (^sLimitedUseTokenHandler)(FIRAppCheckTokenCompletionBlock);
+static NSMutableDictionary<NSString *, FIRAppCheck *> *sInstances;
+
++ (void)initialize {
+  if (self == [FIRAppCheck class]) {
+    sInstances = [NSMutableDictionary new];
+  }
+}
+
++ (void)setAppCheckProviderFactory:(id<FIRAppCheckProviderFactory>)factory {
+  sFactory = factory;
+}
+
++ (void (^)(BOOL, FIRAppCheckTokenCompletionBlock))tokenForcingRefreshHandler {
+  return sTokenForcingRefreshHandler;
+}
+
++ (void)setTokenForcingRefreshHandler:
+    (void (^)(BOOL, FIRAppCheckTokenCompletionBlock))tokenForcingRefreshHandler {
+  sTokenForcingRefreshHandler = [tokenForcingRefreshHandler copy];
+}
+
++ (void (^)(FIRAppCheckTokenCompletionBlock))limitedUseTokenHandler {
+  return sLimitedUseTokenHandler;
+}
+
++ (void)setLimitedUseTokenHandler:
+    (void (^)(FIRAppCheckTokenCompletionBlock))limitedUseTokenHandler {
+  sLimitedUseTokenHandler = [limitedUseTokenHandler copy];
+}
+
++ (void)resetTestState {
+  sTokenForcingRefreshHandler = nil;
+  sLimitedUseTokenHandler = nil;
+  [sInstances removeAllObjects];
+}
+
++ (instancetype)appCheckWithApp:(FIRApp *)app {
+  NSString *key = app.name ?: @"__nil__";
+  FIRAppCheck *existing = sInstances[key];
+  if (existing != nil) {
+    return existing;
+  }
+  FIRAppCheck *created = [[FIRAppCheck alloc] init];
+  sInstances[key] = created;
+  return created;
+}
+
+- (void)tokenForcingRefresh:(BOOL)forceRefresh
+                 completion:(FIRAppCheckTokenCompletionBlock)completion {
+  if (sTokenForcingRefreshHandler != nil) {
+    sTokenForcingRefreshHandler(forceRefresh, completion);
+    return;
+  }
+  if (completion != nil) {
+    completion(nil, nil);
+  }
+}
+
+- (void)limitedUseTokenWithCompletion:(FIRAppCheckTokenCompletionBlock)completion {
+  if (sLimitedUseTokenHandler != nil) {
+    sLimitedUseTokenHandler(completion);
+    return;
+  }
+  if (completion != nil) {
+    completion(nil, nil);
+  }
+}
+
+@end

package/ios/RNFBAppCheckUnitTests/HostStubs/Firebase/Firebase.h

@@ -0,0 +1,47 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ * Enough of Firebase Core / App Check for compiling RNFBAppCheckHelper.m
+ * and driving token completion branches without linking the SDK.
+ */
+#import <Foundation/Foundation.h>
+
+@interface FIRApp : NSObject
+@property(nonatomic, copy) NSString *name;
+- (instancetype)initWithName:(NSString *)name;
+@end
+
+@interface FIRAppCheckToken : NSObject
+@property(nonatomic, readonly, copy) NSString *token;
+- (instancetype)initWithToken:(NSString *)token;
+@end
+
+@protocol FIRAppCheckProvider <NSObject>
+@end
+
+@protocol FIRAppCheckProviderFactory <NSObject>
+- (nullable id<FIRAppCheckProvider>)createProviderWithApp:(FIRApp *)app;
+@end
+
+typedef void (^FIRAppCheckTokenCompletionBlock)(FIRAppCheckToken *_Nullable token,
+                                                NSError *_Nullable error);
+
+@interface FIRAppCheck : NSObject
+
+@property(nonatomic, assign) BOOL isTokenAutoRefreshEnabled;
+
++ (void)setAppCheckProviderFactory:(nullable id<FIRAppCheckProviderFactory>)factory;
++ (instancetype)appCheckWithApp:(FIRApp *)app;
+
+- (void)tokenForcingRefresh:(BOOL)forceRefresh
+                 completion:(FIRAppCheckTokenCompletionBlock)completion;
+- (void)limitedUseTokenWithCompletion:(FIRAppCheckTokenCompletionBlock)completion;
+
+/** Test seam: when set, invoked instead of a network/token fetch. */
+@property(class, nonatomic, copy, nullable) void (^tokenForcingRefreshHandler)
+    (BOOL forceRefresh, FIRAppCheckTokenCompletionBlock completion);
+@property(class, nonatomic, copy, nullable) void (^limitedUseTokenHandler)
+    (FIRAppCheckTokenCompletionBlock completion);
+
++ (void)resetTestState;
+
+@end

package/ios/RNFBAppCheckUnitTests/HostStubs/RNFBApp/RCTConvert+FIRApp.h

@@ -0,0 +1,13 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ */
+#import <Foundation/Foundation.h>
+
+@class FIRApp;
+
+@interface RCTConvert : NSObject
++ (FIRApp *)firAppFromString:(NSString *)appName;
+/** Test seam: map appName → FIRApp. Cleared via resetTestState. */
++ (void)setFirAppFromStringHandler:(FIRApp * (^)(NSString *appName))handler;
++ (void)resetTestState;
+@end

package/ios/RNFBAppCheckUnitTests/HostStubs/RNFBApp/RCTConvert+FIRAppHostStub.m

@@ -0,0 +1,27 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ */
+#import "RNFBApp/RCTConvert+FIRApp.h"
+
+#import <Firebase/Firebase.h>
+
+@implementation RCTConvert
+
+static FIRApp * (^sFirAppFromStringHandler)(NSString *appName);
+
++ (FIRApp *)firAppFromString:(NSString *)appName {
+  if (sFirAppFromStringHandler != nil) {
+    return sFirAppFromStringHandler(appName);
+  }
+  return [[FIRApp alloc] initWithName:appName ?: @"[DEFAULT]"];
+}
+
++ (void)setFirAppFromStringHandler:(FIRApp * (^)(NSString *appName))handler {
+  sFirAppFromStringHandler = [handler copy];
+}
+
++ (void)resetTestState {
+  sFirAppFromStringHandler = nil;
+}
+
+@end

package/ios/RNFBAppCheckUnitTests/HostStubs/RNFBApp/RNFBSharedUtils.h

@@ -0,0 +1,18 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ */
+#import <Foundation/Foundation.h>
+#import <React/RCTBridgeModule.h>
+
+#ifdef DEBUG
+#define DLog(fmt, ...) NSLog((@"%s [Line %d] " fmt), __PRETTY_FUNCTION__, __LINE__, ##__VA_ARGS__);
+#else
+#define DLog(...)
+#endif
+
+@interface RNFBSharedUtils : NSObject
+
++ (void)rejectPromiseWithUserInfo:(RCTPromiseRejectBlock)reject
+                         userInfo:(NSMutableDictionary *)userInfo;
+
+@end

package/ios/RNFBAppCheckUnitTests/HostStubs/RNFBApp/RNFBSharedUtilsHostStub.m

@@ -0,0 +1,18 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ */
+#import "RNFBApp/RNFBSharedUtils.h"
+
+@implementation RNFBSharedUtils
+
++ (void)rejectPromiseWithUserInfo:(RCTPromiseRejectBlock)reject
+                         userInfo:(NSMutableDictionary *)userInfo {
+  if (reject == nil) {
+    return;
+  }
+  NSString *code = userInfo[@"code"] ?: @"unknown";
+  NSString *message = userInfo[@"message"] ?: @"";
+  reject(code, message, nil);
+}
+
+@end

package/ios/RNFBAppCheckUnitTests/HostStubs/RNFBAppCheck/RNFBAppCheckProviderHostStub.m

@@ -0,0 +1,48 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ * Replaces production RNFBAppCheckProvider.m (DeviceCheck / App Attest / debug SDK).
+ */
+#import "RNFBAppCheckProvider.h"
+
+NSString *const kRNFBAppCheckProviderNotReadyMessage =
+    @"App Check provider is not ready. Call initializeAppCheck before requesting tokens.";
+
+@interface RNFBAppCheckHostStubDelegateProvider : NSObject <FIRAppCheckProvider>
+@end
+
+@implementation RNFBAppCheckHostStubDelegateProvider
+@end
+
+@implementation RNFBAppCheckProvider
+
+- (id)initWithApp:(FIRApp *)app {
+  self = [super init];
+  if (self) {
+    self.app = app;
+  }
+  return self;
+}
+
+- (void)configure:(FIRApp *)app
+     providerName:(NSString *)providerName
+       debugToken:(NSString *)debugToken {
+  (void)providerName;
+  (void)debugToken;
+  self.app = app;
+  // Mark ready so Helper RejectIfProviderNotReady allows token APIs.
+  self.delegateProvider = [[RNFBAppCheckHostStubDelegateProvider alloc] init];
+}
+
+- (void)getTokenWithCompletion:(nonnull void (^)(FIRAppCheckToken *_Nullable,
+                                                 NSError *_Nullable))handler {
+  if (handler != nil) {
+    handler(nil, [NSError errorWithDomain:@"RNFBAppCheckHostStub"
+                                     code:0
+                                 userInfo:@{
+                                   @"code" : @"provider-not-ready",
+                                   NSLocalizedDescriptionKey : kRNFBAppCheckProviderNotReadyMessage,
+                                 }]);
+  }
+}
+
+@end

package/ios/RNFBAppCheckUnitTests/HostStubs/React/RCTBridgeModule.h

@@ -0,0 +1,10 @@
+/**
+ * Host-only stub for macOS XCTest. Not shipped in the production pod.
+ */
+#import <Foundation/Foundation.h>
+
+typedef void (^RCTPromiseResolveBlock)(id result);
+typedef void (^RCTPromiseRejectBlock)(NSString *code, NSString *message, NSError *error);
+
+@protocol RCTBridgeModule <NSObject>
+@end