DecodedAppCheckToken interface

Interface representing a decoded Firebase App Check token, returned from theAppCheck.verifyToken() method.

Signature:

exportinterfaceDecodedAppCheckToken

Properties

PropertyTypeDescription
app_idstringThe App ID corresponding to the App the App Check token belonged to. This value is not actually one of the JWT token claims. It is added as a convenience, and is set as the value of thesub property.
audstring[]The audience for which this token is intended. This value is a JSON array of two strings, the first is the project number of your Firebase project, and the second is the project ID of the same project.
expnumberThe App Check token's expiration time, in seconds since the Unix epoch. That is, the time at which this App Check token expires and should no longer be considered valid.
iatnumberThe App Check token's issued-at time, in seconds since the Unix epoch. That is, the time at which this App Check token was issued and should start to be considered valid.
issstringThe issuer identifier for the issuer of the response. This value is a URL with the formathttps://firebaseappcheck.googleapis.com/<PROJECT_NUMBER>, where<PROJECT_NUMBER> is the same project number specified in theaud property.
substringThe Firebase App ID corresponding to the app the token belonged to. As a convenience, this value is copied over to theapp_id property.

DecodedAppCheckToken.app_id

The App ID corresponding to the App the App Check token belonged to. This value is not actually one of the JWT token claims. It is added as a convenience, and is set as the value of thesub property.

Signature:

app_id:string;

DecodedAppCheckToken.aud

The audience for which this token is intended. This value is a JSON array of two strings, the first is the project number of your Firebase project, and the second is the project ID of the same project.

Signature:

aud:string[];

DecodedAppCheckToken.exp

The App Check token's expiration time, in seconds since the Unix epoch. That is, the time at which this App Check token expires and should no longer be considered valid.

Signature:

exp:number;

DecodedAppCheckToken.iat

The App Check token's issued-at time, in seconds since the Unix epoch. That is, the time at which this App Check token was issued and should start to be considered valid.

Signature:

iat:number;

DecodedAppCheckToken.iss

The issuer identifier for the issuer of the response. This value is a URL with the formathttps://firebaseappcheck.googleapis.com/<PROJECT_NUMBER>, where<PROJECT_NUMBER> is the same project number specified in theaud property.

Signature:

iss:string;

DecodedAppCheckToken.sub

The Firebase App ID corresponding to the app the token belonged to. As a convenience, this value is copied over to theapp_id property.

Signature:

sub:string;

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2022-07-29 UTC.