feat(app-check): warn user against production leak appcheck

posva · posva · commit 5f140cdf145e · 2023-07-25T11:45:15.000+02:00
diff --git a/packages/nuxt/src/module.ts b/packages/nuxt/src/module.ts
@@ -107,6 +107,11 @@ export default defineNuxtModule<VueFireNuxtModuleOptions>({
         logger.debug(
           `Using app check debug token from env variable "${process.env.FIREBASE_APPCHECK_DEBUG_TOKEN}"`
         )
+        if (process.env.NODE_ENV === 'production' && options.appCheck.debug) {
+          logger.warn(
+            'You are using a debug token in production, DO NOT DEPLOY THIS BUILD. If you do, you will leak your debug app check token.'
+          )
+        }
         options.appCheck.debug = process.env.FIREBASE_APPCHECK_DEBUG_TOKEN
       }
       addPlugin(resolve(runtimeDir, 'app-check/plugin.client'))

Original file line number	Diff line number	Diff line change
`@@ -107,6 +107,11 @@ export default defineNuxtModule<VueFireNuxtModuleOptions>({`
`107`	`107`	`logger.debug(`
`108`	`108`	`Using app check debug token from env variable "${process.env.FIREBASE_APPCHECK_DEBUG_TOKEN}"`
`109`	`109`	`)`
	`110`	`+ if (process.env.NODE_ENV === 'production' && options.appCheck.debug) {`
	`111`	`+ logger.warn(`
	`112`	`+ 'You are using a debug token in production, DO NOT DEPLOY THIS BUILD. If you do, you will leak your debug app check token.'`
	`113`	`+ )`
	`114`	`+ }`
`110`	`115`	`options.appCheck.debug = process.env.FIREBASE_APPCHECK_DEBUG_TOKEN`
`111`	`116`	`}`
`112`	`117`	`addPlugin(resolve(runtimeDir, 'app-check/plugin.client'))`