search

samrum / OnStarJS

NodeJS Library for making OnStar API requests
MIT License
85 stars 17 forks source link

Bypass Firebase App-Check #234

Closed nilathedragon closed 8 months ago

nilathedragon commented 8 months ago

I would like to contribute the results of my research on OnStar's recent addition of Firebase App-Check.

As I explained in the issue (#233), each client credential pair likely has their own rules applied to them. This is the case for the iOS credentials as well. They are configured in a way that Firebase App-Check is not required.

Simply switching to the iOS client credentials & user agent should make your library work again. In my local test I was able to run functional tests again.

This change also means that in the future, you would need to source your credential pair from the iOS app.

BigThunderSR commented 8 months ago

@nilathedragon, this seems to work and thanks much!!!

@samrum, could you please merge this PR ASAP? Thanks!!!