Can we access your project?
Current Behavior
When Firebase App Check is enabled, the iOS version of our app (TestFlight) cannot successfully call Firebase Cloud Functions.
Cloud Functions return HTTP 401 because the App Check token validation fails.
Android works correctly with App Check enabled.
If App Check is disabled, the exact same iOS build immediately works and Cloud Functions return HTTP 200.
This issue completely blocks our iOS App Store release.
Expected Behavior
When Firebase App Check is enabled, the iOS app should successfully obtain a valid App Check token and call Firebase Cloud Functions, just like Android.
Cloud Functions should return HTTP 200 instead of HTTP 401.
Steps to Reproduce
-
Create a FlutterFlow project using Firebase Authentication and Firebase Cloud Functions.
-
Enable Firebase App Check for iOS using DeviceCheck.
-
Build the iOS app with FlutterFlow Cloud Build and install it through TestFlight.
-
Sign in and call any Firebase Callable Cloud Function.
-
The Cloud Function returns HTTP 401 because App Check token validation fails.
-
Disable Firebase App Check enforcement for Cloud Functions.
-
Install the exact same app build again and repeat the same steps.
-
The Cloud Function immediately succeeds and returns HTTP 200.
Reproducible from Blank
Bug Report Code (Required)
ITFTjfLl8Y9Im8tK+KruacFoiWEUGUMcWOdEl+tuZwgbIoznBqQAe+CkYlFCZOm9aVNceGagpD0Hw/DTj4TLU8AqAxeeGYRSyLoBQwr0e2ijVaqqBZbgP3d8DZlRf2rD4KSN2BNBCO1icUI77TmQAu+UaAnDFOu/Zwh9f6PHaOI=
Visual documentation
Environment
- FlutterFlow version: Latest (July 2026)
- Platform: Web
- Browser name and version: Google Chrome (latest)
- Operating system and version affected: iOS (TestFlight) on iPhone. The issue reproduces only on iOS when Firebase App Check is enabled.
Additional Information
This issue is currently blocking our iOS App Store release.
Android works correctly.
The exact same build succeeds immediately when Firebase App Check is disabled and fails when it is enabled.
We have already verified the Firebase App Check configuration, Apple DeviceCheck configuration, App ID, Team ID, Key ID, rebuilt the app multiple times and reproduced the issue consistently.
Can we access your project?
Current Behavior
When Firebase App Check is enabled, the iOS version of our app (TestFlight) cannot successfully call Firebase Cloud Functions.
Cloud Functions return HTTP 401 because the App Check token validation fails.
Android works correctly with App Check enabled.
If App Check is disabled, the exact same iOS build immediately works and Cloud Functions return HTTP 200.
This issue completely blocks our iOS App Store release.
Expected Behavior
When Firebase App Check is enabled, the iOS app should successfully obtain a valid App Check token and call Firebase Cloud Functions, just like Android.
Cloud Functions should return HTTP 200 instead of HTTP 401.
Steps to Reproduce
Create a FlutterFlow project using Firebase Authentication and Firebase Cloud Functions.
Enable Firebase App Check for iOS using DeviceCheck.
Build the iOS app with FlutterFlow Cloud Build and install it through TestFlight.
Sign in and call any Firebase Callable Cloud Function.
The Cloud Function returns HTTP 401 because App Check token validation fails.
Disable Firebase App Check enforcement for Cloud Functions.
Install the exact same app build again and repeat the same steps.
The Cloud Function immediately succeeds and returns HTTP 200.
Reproducible from Blank
Bug Report Code (Required)
ITFTjfLl8Y9Im8tK+KruacFoiWEUGUMcWOdEl+tuZwgbIoznBqQAe+CkYlFCZOm9aVNceGagpD0Hw/DTj4TLU8AqAxeeGYRSyLoBQwr0e2ijVaqqBZbgP3d8DZlRf2rD4KSN2BNBCO1icUI77TmQAu+UaAnDFOu/Zwh9f6PHaOI=
Visual documentation
Environment
Additional Information
This issue is currently blocking our iOS App Store release.
Android works correctly.
The exact same build succeeds immediately when Firebase App Check is disabled and fails when it is enabled.
We have already verified the Firebase App Check configuration, Apple DeviceCheck configuration, App ID, Team ID, Key ID, rebuilt the app multiple times and reproduced the issue consistently.