com.google.firebase.auth.FirebaseAuthException：Firebase ID令牌未由有效公钥签名

Posted 2021-04-17

我正在尝试使用firebase admin sdk验证我的java服务器上的android客户端应用程序发送的Id令牌。我跟着

Admin Sdk和Android

FirebaseOptions options = new FirebaseOptions.Builder()
    .setServiceAccount(sce.getServletContext().getResourceAsStream("/WEB-INF/serviceAccountKey.json"))
    .setDatabaseUrl("https://[project-id].firebaseio.com/")
    .build();
FirebaseApp.initializeApp(options);
FirebaseToken decodedToken = FirebaseAuth.getInstance().verifyIdTokenAsync(idToken).get();
    String uid = decodedToken.getUid();

从Android客户端检索ID令牌

mAuth.signInAnonymously()
            .addOnCompleteListener(this, new OnCompleteListener<AuthResult>() {
   @Override
   public void onComplete(@NonNull Task<AuthResult> task) {
       if (task.isSuccessful()) {
           final FirebaseUser user = mAuth.getCurrentUser();
           user.getIdToken(true).addOnCompleteListener(new OnCompleteListener<GetTokenResult>() {
               @Override
               public void onComplete(@NonNull Task<GetTokenResult> task) {
                   String token = task.getResult().getToken();
                   Log.e(TAG,"signInAnonymously:success :  onComplete : "+token);
                   callApi(token);
               }
           });

        } else {
            // If sign in fails, display a message to the user.
            Toast.makeText(SignIn.this, "Authentication failed.",
            Toast.LENGTH_SHORT).show();
        }

    }
});

在服务器上获取异常

com.google.firebase.auth.FirebaseAuthException：Firebase ID令牌未由有效公钥签名。有关如何检索ID令牌的详细信息，请参阅https://firebase.google.com/docs/auth/admin/verify-id-tokens。 com.google.firebase.auth.internal.FirebaseTokenVerifier.verifyTokenAndSignature(FirebaseTokenVerifier.java:147）位于com.google.fire.Auth $ .call（FirebaseAuth.java:223）com.google.firebase.auth的com.google.firebase.auth.FirebaseAuth $ .call。位于java.util.concurrent.ThreadPoolExecutor.runWorker（ThreadPoolExecutor.java:1149）的com.google.firebase.tasks.Tasks $ 1.run（Tasks.java:82）上的FirebaseAuth $ 2.call（FirebaseAuth.java:211） java.lang.Thread.run中的.util.concurrent.ThreadPoolExecutor $ Worker.run（ThreadPoolExecutor.java:624）（Thread.java:748）

答案

你可以试试这段代码。（如果不使用，只删除setDatabaseUrl。）

FirebaseOptions options = new FirebaseOptions.Builder()
.setServiceAccount(sce.getServletContext().getResourceAsStream("/WEB-INF/serviceAccountKey.json"))
.build();