Firebase Sms Verification on iOS - 'Token Mismatch'

Firebase SMS Verification on iOS - 'Token Mismatch'

Steps I took to solve the problem:

  1. Ensure I had both a valid development and production APNS
    certificate uploaded to the Firebase Dashboard, under 'Project
    Settings' > 'Cloud Messaging'

dashboardcertificates


  1. In Xcode, in the <my app>.entitlements file, make sure the APS
    Environment
    value is set to either 'development' or 'production',
    depending on your testing situation.

entitlements


  1. Finally (this is what I was missing), check inside your
    AppDelegate.swift and inside the method for
    didRegisterForRemoteNotificationsWithDeviceToken, change the value
    from .sandbox to .prod, or to .unknown to let the app
    bundle determine which token type to use, based on your provisioning profile.

Sample Image

Token Mismatch using Phone Number Authentication - iOS

Follow steps

1) Import Firebase and FirebaseAuth

import Firebase
import FirebaseAuth

2) In didFinishLaunchingWithOptions Configure firebase.

FirebaseApp.configure()

3) Write these two func in AppDelegate.

  func application(_ application: UIApplication, didRegisterForRemoteNotificationsWithDeviceToken deviceToken: Data) {
let firebaseAuth = Auth.auth()
firebaseAuth.setAPNSToken(deviceToken, type: AuthAPNSTokenType.prod)

}

func application(_ application: UIApplication, didReceiveRemoteNotification userInfo: [AnyHashable : Any], fetchCompletionHandler completionHandler: @escaping (UIBackgroundFetchResult) -> Void) {
let firebaseAuth = Auth.auth()
if (firebaseAuth.canHandleNotification(userInfo)){
print(userInfo)
return
}
}

4) In your ViewController class, repeat step first and write code for send OTP on Mobile Number, which you want.

@IBAction func sendCodeAction(_ sender: Any) {
let ugrMgr = UserManager.userManager
let phoneNumber = Auth.auth().currentUser?.phoneNumber
print(phoneNumber!)
print(ugrMgr.mobile!)
PhoneAuthProvider.provider().verifyPhoneNumber("+91" + ugrMgr.mobile!, uiDelegate: nil) { (verificationID, error) in
if let error = error {
print(error.localizedDescription)
mainInstance.ShowAlertWithError(error.localizedDescription as NSString, msg: error.localizedDescription as NSString)
return
}
self.verificationID = verificationID

}

}

Flutter-Firebase phone Auth always returns Token mismatch on iOS

I understand it's too late in answering this. But I also faced the same error recently. I fixed the issue on iOS. Your entire configuration must be valid. There are two settings you need to make.

  • Remove any method swizzling variable from GoogleService-info.plist
    i.e. remove FirebaseAppDelegateProxyEnabled property from plist

  • In AppDelegate.swift, override this method and set the following

    func application(application: UIApplication,
    didRegisterForRemoteNotificationsWithDeviceToken deviceToken: NSData) {
    Messaging.messaging().apnsToken = deviceToken
    }

It is mentioned at https://firebase.google.com/docs/cloud-messaging/ios/client#token-swizzle-disabled

I am using firebase_messaging: ^6.0.16 and the above settings worked

Swift: I am getting error in firebase mobile authentication

first configure your project to firebase

in authentication section in signing method phone enable

download info playlist and add in project by drag and drop

install required pod

app delegate in add

     import Firebase
import FirebaseAuthUI

func application(_ application: UIApplication, didFinishLaunchingWithOptions launchOptions: [UIApplicationLaunchOptionsKey: Any]?) -> Bool {
FirebaseApp.configure()
}

in view controller you need to verify phone number

          import FirebaseAuth
import FirebaseAuthUI
import FirebasePhoneAuthUI

class viewController: UIviewcontroller,FUIAuthDelegate {
override func viewDidLoad() {
super.viewDidLoad()

FUIAuth.defaultAuthUI()?.delegate = self
let phoneProvider = FUIPhoneAuth.init(authUI: FUIAuth.defaultAuthUI()!)
FUIAuth.defaultAuthUI()?.providers = [phoneProvider]
phoneProvider.signIn(withPresenting: self, phoneNumber: nil)
}
func authUI(_ authUI: FUIAuth, didSignInWith user: User?, error: Error?) {
if let user = user {
print("I'm logged in")
}
else {
print(error?.localizedDescription ?? "Something went wrong")
}
}

Invalid Token when trying to authenticate in IOS real device

If somebody face the same problem than me. It seems that if your app have notifications services:

Sample Image

You should add apn key on firebase:

Sample Image

Also if you have problem with connection recaptcha, you can add the following lines on AppDelegate

 //Auth
override func application(_ application: UIApplication, didRegisterForRemoteNotificationsWithDeviceToken deviceToken: Data) {
let firebaseAuth = Auth.auth()
firebaseAuth.setAPNSToken(deviceToken, type: AuthAPNSTokenType.unknown)
}
override func application(_ application: UIApplication, didReceiveRemoteNotification userInfo: [AnyHashable : Any], fetchCompletionHandler completionHandler: @escaping (UIBackgroundFetchResult) -> Void) {
let firebaseAuth = Auth.auth()
if (firebaseAuth.canHandleNotification(userInfo)){
print(userInfo)
return
}
}

Where can I find a list of all error codes and messages for firebase authentication API

I extracted this from the firebase-auth.js file from the minified CDN files.
The keys are being added to auth/ and the values are the default error messages. I hope this helps, but I also hope that a better solution will come up.

You can also have a look at the TypeScript sources or the transpiled JavaScript. These files contain helpful enumerations and constants, however they are marked as private and protected.

authErrors = {
"admin-restricted-operation": "This operation is restricted to administrators only.",
"argument-error": "",
"app-not-authorized": "This app, identified by the domain where it's hosted, is not authorized to use Firebase Authentication with the provided API key. Review your key configuration in the Google API console.",
"app-not-installed": "The requested mobile application corresponding to the identifier (Android package name or iOS bundle ID) provided is not installed on this device.",
"captcha-check-failed": "The reCAPTCHA response token provided is either invalid, expired, already used or the domain associated with it does not match the list of whitelisted domains.",
"code-expired": "The SMS code has expired. Please re-send the verification code to try again.",
"cordova-not-ready": "Cordova framework is not ready.",
"cors-unsupported": "This browser is not supported.",
"credential-already-in-use": "This credential is already associated with a different user account.",
"custom-token-mismatch": "The custom token corresponds to a different audience.",
"requires-recent-login": "This operation is sensitive and requires recent authentication. Log in again before retrying this request.",
"dynamic-link-not-activated": "Please activate Dynamic Links in the Firebase Console and agree to the terms and conditions.",
"email-change-needs-verification": "Multi-factor users must always have a verified email.",
"email-already-in-use": "The email address is already in use by another account.",
"expired-action-code": "The action code has expired. ",
"cancelled-popup-request": "This operation has been cancelled due to another conflicting popup being opened.",
"internal-error": "An internal error has occurred.",
"invalid-app-credential": "The phone verification request contains an invalid application verifier. The reCAPTCHA token response is either invalid or expired.",
"invalid-app-id": "The mobile app identifier is not registed for the current project.",
"invalid-user-token": "This user's credential isn't valid for this project. This can happen if the user's token has been tampered with, or if the user isn't for the project associated with this API key.",
"invalid-auth-event": "An internal error has occurred.",
"invalid-verification-code": "The SMS verification code used to create the phone auth credential is invalid. Please resend the verification code sms and be sure use the verification code provided by the user.",
"invalid-continue-uri": "The continue URL provided in the request is invalid.",
"invalid-cordova-configuration": "The following Cordova plugins must be installed to enable OAuth sign-in: cordova-plugin-buildinfo, cordova-universal-links-plugin, cordova-plugin-browsertab, cordova-plugin-inappbrowser and cordova-plugin-customurlscheme.",
"invalid-custom-token": "The custom token format is incorrect. Please check the documentation.",
"invalid-dynamic-link-domain": "The provided dynamic link domain is not configured or authorized for the current project.",
"invalid-email": "The email address is badly formatted.",
"invalid-api-key": "Your API key is invalid, please check you have copied it correctly.",
"invalid-cert-hash": "The SHA-1 certificate hash provided is invalid.",
"invalid-credential": "The supplied auth credential is malformed or has expired.",
"invalid-message-payload": "The email template corresponding to this action contains invalid characters in its message. Please fix by going to the Auth email templates section in the Firebase Console.",
"invalid-multi-factor-session": "The request does not contain a valid proof of first factor successful sign-in.",
"invalid-oauth-provider": "EmailAuthProvider is not supported for this operation. This operation only supports OAuth providers.",
"invalid-oauth-client-id": "The OAuth client ID provided is either invalid or does not match the specified API key.",
"unauthorized-domain": "This domain is not authorized for OAuth operations for your Firebase project. Edit the list of authorized domains from the Firebase console.",
"invalid-action-code": "The action code is invalid. This can happen if the code is malformed, expired, or has already been used.",
"wrong-password": "The password is invalid or the user does not have a password.",
"invalid-persistence-type": "The specified persistence type is invalid. It can only be local, session or none.",
"invalid-phone-number": "The format of the phone number provided is incorrect. Please enter the phone number in a format that can be parsed into E.164 format. E.164 phone numbers are written in the format [+][country code][subscriber number including area code].",
"invalid-provider-id": "The specified provider ID is invalid.",
"invalid-recipient-email": "The email corresponding to this action failed to send as the provided recipient email address is invalid.",
"invalid-sender": "The email template corresponding to this action contains an invalid sender email or name. Please fix by going to the Auth email templates section in the Firebase Console.",
"invalid-verification-id": "The verification ID used to create the phone auth credential is invalid.",
"invalid-tenant-id": "The Auth instance's tenant ID is invalid.",
"multi-factor-info-not-found": "The user does not have a second factor matching the identifier provided.",
"multi-factor-auth-required": "Proof of ownership of a second factor is required to complete sign-in.",
"missing-android-pkg-name": "An Android Package Name must be provided if the Android App is required to be installed.",
"auth-domain-config-required": "Be sure to include authDomain when calling firebase.initializeApp(), by following the instructions in the Firebase console.",
"missing-app-credential": "The phone verification request is missing an application verifier assertion. A reCAPTCHA response token needs to be provided.",
"missing-verification-code": "The phone auth credential was created with an empty SMS verification code.",
"missing-continue-uri": "A continue URL must be provided in the request.",
"missing-iframe-start": "An internal error has occurred.",
"missing-ios-bundle-id": "An iOS Bundle ID must be provided if an App Store ID is provided.",
"missing-multi-factor-info": "No second factor identifier is provided.",
"missing-multi-factor-session": "The request is missing proof of first factor successful sign-in.",
"missing-or-invalid-nonce": "The request does not contain a valid nonce. This can occur if the SHA-256 hash of the provided raw nonce does not match the hashed nonce in the ID token payload.",
"missing-phone-number": "To send verification codes, provide a phone number for the recipient.",
"missing-verification-id": "The phone auth credential was created with an empty verification ID.",
"app-deleted": "This instance of FirebaseApp has been deleted.",
"account-exists-with-different-credential": "An account already exists with the same email address but different sign-in credentials. Sign in using a provider associated with this email address.",
"network-request-failed": "A network error (such as timeout, interrupted connection or unreachable host) has occurred.",
"no-auth-event": "An internal error has occurred.",
"no-such-provider": "User was not linked to an account with the given provider.",
"null-user": "A null user object was provided as the argument for an operation which requires a non-null user object.",
"operation-not-allowed": "The given sign-in provider is disabled for this Firebase project. Enable it in the Firebase console, under the sign-in method tab of the Auth section.",
"operation-not-supported-in-this-environment": 'This operation is not supported in the environment this application is running on. "location.protocol" must be http, https or chrome-extension and web storage must be enabled.',
"popup-blocked": "Unable to establish a connection with the popup. It may have been blocked by the browser.",
"popup-closed-by-user": "The popup has been closed by the user before finalizing the operation.",
"provider-already-linked": "User can only be linked to one identity for the given provider.",
"quota-exceeded": "The project's quota for this operation has been exceeded.",
"redirect-cancelled-by-user": "The redirect operation has been cancelled by the user before finalizing.",
"redirect-operation-pending": "A redirect sign-in operation is already pending.",
"rejected-credential": "The request contains malformed or mismatching credentials.",
"second-factor-already-in-use": "The second factor is already enrolled on this account.",
"maximum-second-factor-count-exceeded": "The maximum allowed number of second factors on a user has been exceeded.",
"tenant-id-mismatch": "The provided tenant ID does not match the Auth instance's tenant ID",
timeout: "The operation has timed out.",
"user-token-expired": "The user's credential is no longer valid. The user must sign in again.",
"too-many-requests": "We have blocked all requests from this device due to unusual activity. Try again later.",
"unauthorized-continue-uri": "The domain of the continue URL is not whitelisted. Please whitelist the domain in the Firebase console.",
"unsupported-first-factor": "Enrolling a second factor or signing in with a multi-factor account requires sign-in with a supported first factor.",
"unsupported-persistence-type": "The current environment does not support the specified persistence type.",
"unsupported-tenant-operation": "This operation is not supported in a multi-tenant context.",
"unverified-email": "The operation requires a verified email.",
"user-cancelled": "The user did not grant your application the permissions it requested.",
"user-not-found": "There is no user record corresponding to this identifier. The user may have been deleted.",
"user-disabled": "The user account has been disabled by an administrator.",
"user-mismatch": "The supplied credentials do not correspond to the previously signed in user.",
"user-signed-out": "",
"weak-password": "The password must be 6 characters long or more.",
"web-storage-unsupported": "This browser is not supported or 3rd party cookies and data may be disabled."
}

Items last updated: October 2020



Update 2022:

Make sure to follow the link in this answer to find the official list of error names.



Related Topics



Leave a reply



Submit