Accepts an App Attest assertion and an artifact previously obtained from
apps.exchangeAppAttestAttestation
and verifies those with Apple. If valid, returns an
AppCheckToken
.
HTTP request
POST https://firebaseappcheck.googleapis.com/v1/{app=projects/*/apps/*}:exchangeAppAttestAssertion
The URL uses gRPC Transcoding syntax.
Path parameters
Parameters | |
---|---|
app
|
Required. The relative resource name of the iOS app, in the format:
If necessary, the
|
Request body
The request body contains data with the following structure:
JSON representation |
---|
{ "artifact": string, "assertion": string, "challenge": string, "limitedUse": boolean } |
Fields | |
---|---|
artifact
|
Required. The artifact returned by a previous call to
A base64-encoded string. |
assertion
|
Required. The CBOR-encoded assertion returned by the client-side App Attest API. A base64-encoded string. |
challenge
|
Required. A one-time challenge returned by an immediately prior call to
A base64-encoded string. |
limitedUse
|
Specifies whether this attestation is for use in a
limited use
(
|
Response body
If successful, the response body contains an instance of
AppCheckToken
.