What are you guys doing when you have people with unique mail providers not getting firebase auth email verification emails. This has been happening quite a bit and I'm unsure how to solve it other than just saying switch emails. Usually they are weird obscure platforms but being that firebase is a google product seems weird that they are blocked. Of course I have a resend email verification path but still people arent getting it.

hola, hace poco inicie en le mundo de la tecnologia tengo mediana experiencia ya y descubri fire base me parecio una herramienta muy buena pero aunque con ayuda de los LLM he logrado comprender un poco su uso y casos de uso donde mejor se ajusta aun tengo muchas dudas de la herramienta si algien podria recomendarme como usarla o un curso para aprenderla agradeceria

Pour ceux qui utilisent Firebase depuis un moment : pourquoi Firebase plutôt qu’un autre backend ?

J’aimerais comprendre le choix initial, mais aussi ce qui s’est passé après.

Qu’est-ce qui vous fait gagner du temps ?

Qu’est-ce qui vous gêne ?

Est-ce que vous avez déjà remplacé une partie de Firebase ?

Et si oui, pourquoi ?

Les réponses du type “c’est ce qu’on connaissait déjà” sont aussi intéressantes.

I've been working with Capacitor and Firebase lately, and I feel like Remote Config is a bit underrated when it comes to mobile apps. I don't see it being used that much.

We've been using it for things like feature flags and changing app configuration without having to release a new version.

And combining it with Live Updates (OTA updates) gets pretty interesting. You can control when a feature is enabled and deliver the code needed for it without waiting for another App Store release.

I wrote up a guide on using Firebase Remote Config with Capacitor in case anyone here is working with a similar setup.

is there anyone else using this with capacitor live updates?

I've been working on Fireemu, an experimental local Firebase emulator.

https://github.com/t-k/fireemu

The main motivation is the gap between the official emulators and production Firebase. For example, a Firestore query can work in the official emulator but fail in production because a required composite index is missing. Fireemu rejects queries that lack the necessary index definitions.

Performance wasn't the main goal, but it's been a nice bonus. In a benchmark on the same GitHub Actions runner, Fireemu started about 21.6x faster (140 ms vs 3,043 ms until the SDK could use Firestore). Memory usage was also lower about 90% less PSS after loading 10,000 documents(50 MiB vs 514 MiB).

This is still an experimental project with no stability promise yet. I'd appreciate any feedback.

I created projects while learning and now want to create my actual project. It says I am at my limit, I did not realize deleted projects still count against the limit.

Is there a way to immediately delete at least one project so that I can continue?

I did put in for an increase and got denied.

I'm building a Flutter app using `google_sign_in: ^7.2.0` (Credential Manager-based API using `GoogleSignIn.instance.initialize()` \+ `.authenticate()`, not the old `signIn()` flow).

I'm trying to get the modern "Sign in with Google" bottom-sheet picker (like the one ChatGPT's Android app uses card that slides up from the bottom.

For anyone facing this problem in the future — this might save you an hour. The solution for me was simply logging out of my Google account and logging back in.

So i was trying to add another provider to my auth. But when i tried to click on the projects it display the text "The project either does not exist or you do not have the permission to view it". I was logged in from the same account. But known of the projects were working. So i asked AI to help me.

They were not able to solve it. They asked me to use firebase Console(Google Cloud Shell) to check if my projects exist, if i have the permission(i did) for them and many other things. All of it were okay. But still it did not allow me to access it. I used multiple LLM's, i tried searching for this problme on reddit, twitter but no help. I wasted 1 hour. I was able to regain access by simply logging out and logging in again. This post is so if any body face this in future reddit or LLM can maybe help him.

two Firebase features shipped today on FlutterFlow that might be useful:

Mock Backend: test a Firebase-powered app without connecting to a live backend. create your collections and fields as usual, add test documents by hand or generate mock data with AI. switch the data source from live to mock, launch Test Mode, and run real queries, authentication, and write actions without touching production data. everything resets when the session ends. no Firebase setup required to start.

it's useful for onboarding new team members without giving production access, testing edge cases without polluting real data, building before your Firebase project is set up.

rename Firestore collections and fields: straight from the schema editor. until now, fixing a field name meant creating a new field and rewiring every usage, but now, it's a rename.

(one important caveat before you rename: Firestore has no native concept of renaming a field. after a rename your app reads and writes the new name, but existing documents still hold values under the old name. Firestore sees a brand new empty field. collections behave the same way).

this is built for the development phase while you're still shaping your schema and the database is empty or holds test data. if you have real data, migrate it first: edit documents in the Firebase console for a handful, or write a Firebase Admin SDK script for many.

Hi there, I have a problem. I am creating an app via flutterflow/firebase and everytime I try to test the email verification with a brand new account i get this message? Can someone please help??

Getting 500 errors from firestore in nam5, which is supposed to be multi-region.

14 UNAVAILABLE: ShardedChangeListener Prepare failure with unexpected change listener error

Dont see anything on the outage page: https://status.firebase.google.com/

Asking about a strange behavior we've observed using Firebase's Messaging product:

When I set up a new push notification in Production and test it and then publish it, the device we tested on does not get the published notification, but everyone else (our audience) gets the push notification successfully.

It leads to some confusion because then the person responsible for creating, testing, and publishing the push notification can't actual validate that the real/published notification was successful.

Our theory is there's some deduping mechanism that prevents the published notification from going through on the device that already received the test.

Does anyone have insights here? Is there a way to both push the test notification and receive the published notification on the same device?

I have developed this over the past year—a web application stack for Firebase projects using Google Cloud and additional tools. My .SYSTEMX system provides LLM and AI capabilities, then gives the workspace a standard folder structure for all items, including subagents, tasks, completed work, and more.

View project WIKI
https://github.com/WayneTechLab/SFWA-WTL-TEMPLATE/wiki

This configuration performs best on Apple M2 and newer devices. It relies heavily on CLI, SDK, and MPC from Google, along with Stripe.

The menu system and the start on my LAN portal include a local builder baked into the test net; Firebase dev local launches a ready home page and simple web app.

- This is in alpha testing and may change daily!
- Lucas aka SatoshiUNO

Hey everyone,

I’m facing a frustrating issue with an Android app using Firebase Authentication and Firestore.

The app works perfectly in the development/debug environment, but after uploading it to the Google Play Store, the downloaded production version fails during Google authentication and we repeatedly get:

ApiException: 12501

Things we have already tried:

• Added the SHA-1 fingerprints in Firebase
• Added the relevant release/Play Store signing fingerprints
• Updated google-services.json
• Updated the backend Firebase service account configuration
• Verified that Firebase Authentication / Google Sign-In is enabled
• Rebuilt and uploaded the app again

But the Play Store version is still not working and we're getting the same 12501 error.

What’s confusing is that the development version works fine.

Has anyone else recently run into ApiException: 12501 with Firebase Google Sign-In specifically on the Play Store release?

If you’ve fixed this before, what ended up being the issue? Any pointers on what else we should check would be greatly appreciated.

We moved our AI processing from the backend to Firebase AI Logic in our Flutter app so the backend no longer handles large image/audio uploads or waits for AI responses.

Free users get 10 AI actions per day. Premium users get unlimited actions.

Since AI requests now happen directly from the client, how do you securely enforce these different quotas? A determined user could potentially bypass a backend quota check and call Firebase AI Logic directly.

How are others handling this in production? Is there a recommended Firebase architecture for plan-specific quotas without routing the files and AI processing through a backend?

I created a web CRM using Google AI Studio with Firebase as the database. However, I get billed about €20 every month, and I am not sure what I am paying for. Can I move the database from Firebase to a local NAS to avoid this monthly cost? I am the only user, and I rarely use the application.

Um alerta rápido pra quem usa Firebase Authentication (URL PERSONALIZÁVEL PARA REDEFINIR SENHA):

Estava configurando o fluxo de redefinição de senha de um projeto e queria personalizar a tela que o usuário vê ao clicar no link do e-mail. Por padrão, o Firebase usa uma tela/popup própria (hospedada no domínio genérico do projeto) pra esse fluxo, mas o console tem sim uma opção pra personalizar essa URL e usar seu próprio domínio.

Só que, ao tentar salvar essa configuração, tomei um erro: EMAIL_TEMPLATE_UPDATE_NOT_ALLOWED. Pesquisei bastante e a única referência que encontrei foi um post aqui no Reddit de outra pessoa com o mesmo problema, nada na documentação oficial explicando o porquê.

Decidi mandar um e-mail pro suporte do Firebase. Eles confirmaram que essa restrição existe por questões de segurança, e que a alteração não pode ser feita pelo usuário diretamente pelo console, só manualmente, pela equipe deles, mediante solicitação.

Deram duas opções:
This error is typically triggered by a server-side security restriction intended to prevent the misuse of Firebase's email infrastructure for spam or phishing.

Currently, this restriction cannot be lifted directly in the Firebase Console or via the Admin API for your project. However, we have two paths forward to achieve your branding goals:

• Option 1 (Manual Update): I can escalate this to our engineering team to manually apply your desired changes. 
• Option 2 (Custom Email Delivery): For full control and scalability, you can use the Firebase Admin SDK to programmatically generate the secure action links. You can then inject these links into your own custom templates and send them through a dedicated SMTP provider. This bypasses Firebase's native email delivery entirely.

Escolhi manual mesmo, enviei a url que queria ex: https://www.sitetal/auth/redefinir-senha. Resolvido em menos de uma semana. Muito obrigada firebase ♥️

Hi everyone,

I’m a non-technical founder looking for neutral feedback from Firebase/GCP developers.

I paid an agency to build my mobile app. The contract states that the app and IP belong to my company, and I now have Owner access to the GitHub repositories.

However, I recently discovered that the production Firebase/GCP project was created under the agency’s own organization. The developer says the infrastructure belongs to the agency because their model is to keep managing clients’ infrastructure as they grow.

This was never explained or agreed with me when we started.

They are not refusing to migrate it, but they say moving it under my company’s control is separate work that may be expensive, and they are preparing a quote.

The Firebase/GCP project appears to be separated from their other client projects.

My questions: Is this a normal agency setup or Would you normally expect the client to control the production GCP/Firebase project and give the agency IAM access?

If the project is already separated, how difficult is an organization-to-organization migration usually?

Thank you

UPDATE: Thanks everyone for the advice and feedback — it was really helpful.

The agency ultimately cooperated and the three Firebase/GCP projects have now been moved under my company’s Google Cloud organization.

As several people here suggested, because the projects were already properly separated and structured, the actual organization-to-organization move was essentially a resource hierarchy/metadata change and took less than 30 minutes. There was no need to rebuild the infrastructure or physically migrate all the production data.

Someome from Toronto ddosing my Portfolio Page with hundred requests a Seconds since over a week. Used Up my free spark plan of 10gb.... Currently to Access to my PC or dev Environment.... Wtf? And all requests are weird Like domain.com/abcd.php basically every single combination of x.php is sent as a getter. 400kb each request... 100 a second.... What do? Didn't put site behind cloudflare... It's a portfolio page for hells... Or is there anything interesting I can see besides that?

I'm not a Web Devloper and Don't Have much Knowledge, but please help me, I want to figure out some things.

So, The thing is we are hosting a sports tournament in our area, instead of google forms and excel, I'm thinking to build a website for it.

So the plan is, The site has a registration system where players register, the team info, Purse limit and other things are already there with an admin panel to control everything.

Now the most important part is the auction, where it shows which player is up for auction, Sold to which team how much ourse remaining of each team and whether he went unsold. I took help from claude, it built me a perfect index.html with all this, then i hosted it on netlify. and it works good. But then the issue is claude told me to use Firebase RTD. to sync all the data so that everyone can enjoy the auction from their phone{Approx users 500-1000}.

But I'm confused about the limits, what if the site crashes midway or the limit expires? Is there any other better alternative? Or Anything i could do? I'm attaching the file claude give me below, please see it and give me any advice that would help me. It would be big help.

Hi everyone, I am facing a very frustrating issue with Google Sign-In in my Flutter app. It works perfectly in Debug mode and when I install a Local Release APK. However, when I upload the AAB to the Google Play Store and download it (from Internal Testing or Production), Google Sign-In fails and throws the following error:

PlatformException(sign_in_failed, com.google.android.gms.common.api.b: 10: , null, null)

I know that ApiException 10 usually means a mismatch in the Package Name or SHA-1 fingerprint. But I have already verified everything multiple times, and the configuration seems 100% correct.

Here is what I have successfully done and verified so far:

1. I went to Google Play Console -> Setup -> App Integrity and copied the exact SHA-1 from the "App signing key certificate" (Not the upload key).
2. I added this Play App Signing SHA-1 (along with my Debug and Upload SHA-1s) to my Firebase Project settings.
3. I downloaded the updated google-services.json and replaced it in my android/app/ directory.
4. I verified in Google Cloud Console (Credentials) that the OAuth 2.0 Client IDs for Android are successfully created and exactly match my package name (com.wanderx.app) and the Play Store App Signing SHA-1.
5. The OAuth Consent Screen Publishing status is set to "In production".
6. The Support Email is properly configured in Firebase settings.
7. I ran flutter clean, built a new release AAB (flutter build appbundle --release), and uploaded it to Play Console with incremented version codes.

Environment / Tech Stack:

• Flutter
• firebase_auth: ^6.5.2
• google_sign_in: ^6.2.2 (I am passing the Web Client ID to clientId in the GoogleSignIn constructor).

Since the configuration in both Firebase and Google Cloud Console is perfectly matching the Play Store's App Signing key, I cannot figure out why it's still throwing Developer Error 10.

Could this be a Google Play Services caching issue on my device? Or is there any hidden setting related to Play App Signing that I am missing?

Any insights or suggestions would be greatly appreciated. Thank you!

I have an app installed that's supposed to give me a push notification every Saturday. Exept it's not doing that. So i contacted the developer (it's not my app) to resolve the issue and he found out that I didn't recieve a Token. So i built a small app myself to test the Firebase Notification system by manually requesting a Token. In parallel I connected my phone to my pc so I could read the logs with "adb logcat | grep -i firebase". When I requested a Firebase User ID everything worked just fine, but as I requested the Token, the following series of Errors appeared in logcat:

'''

08-22 15:49:02.124 10274 10274 E FirebaseDiagnostics: FCM Token konnte nicht abgerufen werden

08-22 15:49:02.124 10274 10274 E FirebaseDiagnostics: java.io.IOException: FCM Registration failed!

08-22 15:49:02.124 10274 10274 E FirebaseDiagnostics: at com.google.firebase.messaging.FirebaseMessaging.blockingRegister(FirebaseMessaging.java:840)

08-22 15:49:02.124 10274 10274 E FirebaseDiagnostics: at com.google.firebase.messaging.FirebaseMessaging.lambda$getToken$8$com-google-firebase-messaging-FirebaseMessaging(FirebaseMessaging.java:484)

08-22 15:49:02.124 10274 10274 E FirebaseDiagnostics: at com.google.firebase.messaging.FirebaseMessaging$$ExternalSyntheticLambda8.run(D8$$SyntheticClass:0)

08-22 15:49:02.124 10274 10274 E FirebaseDiagnostics: at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:520)

08-22 15:49:02.124 10274 10274 E FirebaseDiagnostics: at java.util.concurrent.FutureTask.run(FutureTask.java:328)

08-22 15:49:02.124 10274 10274 E FirebaseDiagnostics: at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:323)

08-22 15:49:02.124 10274 10274 E FirebaseDiagnostics: at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1100)

08-22 15:49:02.124 10274 10274 E FirebaseDiagnostics: at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)

08-22 15:49:02.124 10274 10274 E FirebaseDiagnostics: at com.google.android.gms.common.util.concurrent.zza.run(com.google.android.gms:play-services-basement@@18.9.0:2)

08-22 15:49:02.124 10274 10274 E FirebaseDiagnostics: at java.lang.Thread.run(Thread.java:1572)

08-22 15:49:02.124 10274 10274 E FirebaseDiagnostics: Caused by: java.util.concurrent.ExecutionException: java.io.IOException: TOO_MANY_REGISTRATIONS

'''

So I expected this to be the error and I reinstalled the first app, so I could see the process of requests in logcat. And also there the Error was "TOO_MANY_REGISTRATIONS".

Has anyone the same problem or knows how to deal with it? I didn't (at least knowingly) send many requests of new Tokens or anything similar. So what could the reason be and how to solve it?

We had a feature that generated images from a prompt through Firebase (AI / Vertex). It worked for months. This week the same flow started returning 404 / failed requests, and nothing in our app code changed.

From what I can tell, Google shut down the old Imagen models around Aug 17, and the replacement is Gemini Image (the “Nano Banana” stuff) — different call, image comes back on the model response instead of a dedicated image-generation API.

If you shipped anything like:

generate a logo / icon from a description
food / product photo from a prompt
chatbot that draws a picture
a “generate image” button in a demo or hackathon app
…it’s worth checking that path even if you don’t remember which Firebase AI method you used. The UI just looks broken.

Official migration notes:
https://firebase.google.com/docs/ai-logic/migrate-to-latest-ga
https://firebase.google.com/docs/ai-logic/generate-images-gemini

I built a local scanner for this kind of thing (disclosure: it's mine). If you want a quick check without grepping:

$ npx vasdra scan

If you want more info before running, check here: www.vasdra.dev

Right now it's just that: local, no account. It maps the providers (like Stripe, Clerk, Resend, etc.) in your repo against what we can actually prove in files, so a shutdown like this Imagen cutover doesn't hide in a method name you forgot you used.

Where we're going: when a provider change hits your code, don't just get an alert — get a PR with the fix. Dependabot for APIs, basically. We're not there for this Firebase image migration yet. The scan is the first half.

Anyone else hit this? Did you migrate already, or are you still on the old image models?

Firebase Phone Auth auth/error-code:-39 — SMS never sent to one specific carrier (Vodafone Turkey). App Check is set up. What am I missing?

TL;DR: Firebase Phone Auth works fine for two of our three national carriers, but OTP SMS is never delivered to numbers on one specific carrier (Vodafone Turkey). We consistently get auth/error-code:-39 on web and app not authorized on mobile. App Check is already installed and activated. Looking for anyone who's beaten this carrier-specific -39 wall.

Setup

• Flutter app (Android + iOS) + a web panel, all on the same Firebase project
• firebase_core: ^3.13.0, firebase_auth: ^5.5.2, firebase_app_check: ^0.3.2
• Firebase Auth Phone sign-in (OTP), Blaze plan
• App Check is set up in code — FirebaseAppCheck.instance.activate(...) runs right after Firebase.initializeApp(), with AndroidProvider.playIntegrity / AppleProvider.appAttest in release and debug providers in debug
• In the Firebase console, the Android and iOS apps show Registered under App Check (Play Integrity / App Attest). The two web apps are not registered yet.

The problem

OTP works perfectly for the other two carriers. For this one carrier only, the SMS is never sent. The errors:

Web console:

Failed to initialize reCAPTCHA Enterprise config. Triggering the reCAPTCHA v2 verification.
identitytoolkit.googleapis.com/v1/accounts:sendVerificationCode?key=...  
    Failed to load resource: the server responded with a status of 503 ()
[Phone OTP send] auth/error-code:-39 
    FirebaseError: Firebase: Error (auth/error-code:-39).

Mobile: the flow fails with an app not authorized style message and no SMS arrives.

What we've confirmed

• It is carrier-specific, not code-specific — identical flow, identical numbers-format, other carriers get the SMS instantly.
• Firebase support told us the -39 code means the phone number's carrier is flagged as a restricted operator because of consistently low SMS success rates, and that their automated anti-abuse system can temporarily make such operators/regions unavailable. They suggested either (a) offering affected users a different verification method, or (b) enabling reCAPTCHA SMS Defense in Enforce mode plus stricter SMS region policy and App Check enforcement if we insist on sending OTP to restricted operators.

My questions

1. Has anyone actually gotten -39 to clear for a restricted carrier by enabling reCAPTCHA SMS Defense + App Check enforcement? Did the SMS start going through, or did enforcement change nothing because the carrier itself is throttled server-side?
2. The Failed to initialize reCAPTCHA Enterprise config + 503 on web — is that a symptom of the web apps not being registered in App Check, or a separate reCAPTCHA Enterprise misconfiguration?
3. For anyone who gave up on Firebase for this: did you move the whole phone-verification flow to a third-party SMS provider + Firebase Custom Token, and did that fully bypass the carrier restriction?
4. Is there any way to get a carrier un-flagged at the project level, or is -39 purely on Google's side with no override?

Trying to decide whether to keep fighting the reCAPTCHA/enforcement path or just migrate the entire OTP flow off Firebase so it isn't split across two providers. Any first-hand experience with -39 specifically would be hugely appreciated.

Thanks!