[firebase_auth] Firebase SMS Authentication Error Code 39

[mmd44]

Versions

• Android Studio version: Jellyfish | 2023.3.2 Canary 1
• Firebase Component: firebase-auth
• Component version: BOM: 32.8.0

Description

I am facing a weird issue with firebase sms auth in Android and Jetpack compose.

I am trying to test reCAPTCHA flow when Play Integrity Check is not available on REAL NUMBERS (when testing with fictional numbers, everything works fine).

I have an app that is not yet on the store, so assuming Play Integrity API will fail and firebase auth sdk will try to validate my app through ReCaptcha as stated in docs.

I have already setup the following:

• Enabled reCAPTCHA Entreprise on Google console
• Added debug and release signing keys SHA1 and SHA256 to the firebase console
• No country restriction is on firebase console
• API Key on google console is not constrained
• My app domain name (xxxxxx.firebaseapp.com) is added to firebase's authorized domains
• Tested on both release and debug versions of my app but got same result

Steps to reproduce:

The weird behavior is as following:

I have 2 real phone numbers one with country code +1 (CAD) and the other +961 (LB) (both are listed as supported countries);

1. When I test with +1 XXX XXX XXXX:

I successfully receive the code while noticing the following errors in logs:

• [SmsRetrieverHelper] SMS verification code request failed: unknown status code: 18002 Invalid PlayIntegrity token; app not Recognized by Play Store.
• Failed to initialize reCAPTCHA config: No Recaptcha Enterprise siteKey configured for tenant/project *

2. When I test with +961 XX XXXXXX:

I fail to receive the code, get the same errors in logs as above + a failure message:

• [SmsRetrieverHelper] SMS verification code request failed: unknown status code: 17499 Error code:39

In both test cases, the app successfully opens the browser (a screen with 'verifying you're not a robot' label text and loading) and redirects back to my app, so I am assuming the reCAPTCHA is working...

I have also tried to add the recaptcha sdk and linking it to a key added on Google console and initialize it on my app but I also failed to get any different result.

Any idea what could be the issue?

[google-oss-bot]

I found a few problems with this issue:

• I couldn't figure out how to label this issue, so I've labeled it for a human to triage. Hang tight.
• This issue does not seem to follow the issue template. Make sure you provide all the required information.

[Xiaoshouzi-gh]

We use recaptcha V2 instead of Entreprise internally with phone auth, can you reproduce both cases after you Disable reCAPTCHA Entreprise on Google console?

[mmd44]

Yes same results. It seems reCAPTCHA Enterprise is not being used even when enabled as no requests are being registered on this API on Google console's enabled APIs page.