Method: oauthClients.generateAppAttestChallenge

Generates a challenge that protects the integrity of an immediately following call tooauthClients.exchangeAppAttestAttestation oroauthClients.exchangeAppAttestAssertion. A challenge should not be reused for multiple calls.

HTTP request

POST https://firebaseappcheck.googleapis.com/v1/{app=oauthClients/*}:generateAppAttestChallenge

The URL usesgRPC Transcoding syntax.

Path parameters

Parameters
app

string

Required. The relative resource name of the iOS app, in the format:

projects/{project_number}/apps/{app_id}

If necessary, theproject_number element can be replaced with the project ID of the Firebase project. Learn more about using project identifiers in Google'sAIP 2510 standard.

Request body

The request body must be empty.

Response body

If successful, the response body contains an instance ofGenerateAppAttestChallengeResponse.

Authorization scopes

Requires one of the following OAuth scopes:

  • https://www.googleapis.com/auth/cloud-platform
  • https://www.googleapis.com/auth/firebase

For more information, see theOAuth 2.0 Overview.

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2025-09-25 UTC.