Firebase distribution api failed OAuth2 authorization

Question

I need help understanding why I can't get info from distribution api.

I already check that I have the api enabled in the console, I double checked the service account to make sure its correct and everything seems ok

var credential = GoogleCredential.FromJsonParameters(new JsonCredentialParameters()
{
    Type = "service_account",
    ProjectId = "myApp",
    PrivateKeyId = "************",
    PrivateKey =
        "-----BEGIN PRIVATE KEY-----key-----END PRIVATE KEY-----\n",
    ClientEmail = "firebase-adminsdk-fbsvc@*******.iam.gserviceaccount.com",
    ClientId = "**************",
    TokenUri = "https://oauth2.googleapis.com/token",
    UniverseDomain = "googleapis.com"
})


var token = await Credential.UnderlyingCredential.GetAccessTokenForRequestAsync("https://accounts.google.com/o/oauth2/auth");


try
{
    using (HttpClient client = new HttpClient())
    {
        client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", token);

        string url = "https://firebaseappdistribution.googleapis.com/v1/projects/myApp/apps/myApp/releases";
        HttpResponseMessage response = await client.GetAsync(url);
        string result = await response.Content.ReadAsStringAsync();
        Console.WriteLine("Response: " + result);
    }
}
catch(Exception e)
{
    
}

I'm trying to access firebase distribution api to see the latest release I have but the request is always throwing a 401 saying

Request had invalid authentication credentials. Expected OAuth 2 access token, login cookie or other valid authentication credential

I don't really know what im doing wrong

You are using OAUTH2 which is a two step authentication. Step 1 is to get a cookie/token from server. Step 2 is to use token to make a query. You are failing step 1. The token return is no good. So you are failing step 1(error 401 - not authorized) The following may help : learn.microsoft.com/en-us/entra/identity-platform/… — jdweng
– jdweng, Commented Mar 2 at 14:23

RCDevs Security · Accepted Answer · 2025-03-05 15:15:08Z

0

It looks like your issue is caused by using an incorrect OAuth scope when requesting an access token. Firebase APIs typically require one of the following scopes:

Cloud Platform Scope (recommended for broader Firebase access):

var token = await var token = await credential.UnderlyingCredential.GetAccessTokenForRequestAsync("https://www.googleapis.com/auth/cloud-platform");
services):

Firebase Scope (if you want to limit access specifically to Firebase-related services):

var token = await credential.UnderlyingCredential.GetAccessTokenForRequestAsync("https://www.googleapis.com/auth/firebase");

Also verify that your service account has the necessary IAM role (Firebase App Distribution Admin).

answered Mar 5 at 15:15

RCDevs Security

4427 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Firebase distribution api failed OAuth2 authorization

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related