search

havesource / cordova-plugin-push

Register and receive push notifications
MIT License
150 stars 283 forks source link

Request: Update Firebase SDK in Plugin to Support Apple Privacy Manifest Requirement #297

Open plutoniac opened 2 weeks ago

plutoniac commented 2 weeks ago

I am reaching out regarding an important compliance update that will impact apps using the cordova-plugin-push plugin, specifically due to the Firebase dependencies.

Background: As per the recent Apple App Store policy, third-party SDKs that impact user privacy, including Firebase SDKs, will require a privacy manifest starting November 12, 2024. During my app’s recent submission, Apple provided the following feedback:

ITMS-91061: Missing privacy manifest Your app includes Firebase SDK components, such as FirebaseCore, FirebaseCoreDiagnostics, FirebaseInstallations, and FirebaseMessaging, which are identified as privacy-impacting SDKs. Starting November 12, 2024, all privacy-impacting SDKs must include a privacy manifest to comply with App Store policies. For more information, please refer to Apple’s third-party SDK requirements.

Given this policy, I wanted to check if an update to Firebase (or another solution to support privacy manifests) might be scheduled for the cordova-plugin-push library. Currently, the plugin appears dependent on an older version of Firebase (IOS_FIREBASE_MESSAGING_VERSION set to ~> 8.1.1), which does not support the required privacy manifest.

Are there any plans to update the Firebase dependency in cordova-plugin-push to a more recent version that includes the privacy manifest? This update would be invaluable in helping us comply with Apple’s latest requirements.

Thank you for considering this request.

peterfox1 commented 1 week ago

Yes I'm also looking for this, it looks like the change has already been completed in the following PR which has been closed & merged so it seems like this will be in the next release: https://github.com/havesource/cordova-plugin-push/pull/294