39512652448
94%

Ran 20 Oct 2026 11:06PM UTC

Jobs 1

Files 16

Run time 1min

Badge

Embed ▾

Committed 20 Oct 2026 11:05PM UTC coverage: 94.366% (+0.02%) from 94.349%

Build # 39512652448

Build Type

push

github

Committed by

web-flow

Commit Message

feat: verify Firebase ID tokens from native Google sign-in (#3)

* feat: verify Firebase ID tokens from native Google sign-in

Monitor and Link now sign in to Google natively on Android and iOS (the
platform's account picker, then Firebase Auth) and post the Firebase ID
token. FirebaseIdTokenVerifier checks it on the consumer's behalf.

A native sign-in carries no nonce of ours, so it is pinned instead: issuer
and audience to the consumer's Firebase project, firebase.sign_in_provider
to google.com, auth_time to the last five minutes, and each token is
accepted once. Purely additive, so an older Guardian loaded first by
another consumer does not break it.

* style: keep the auth_time check on one line for PHPCS

Coverage Stats

603 of 639 relevant lines covered (94.37%)

8.57 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	39512652448.1	20 Oct 2026 11:06PM UTC	16	94.37	GitHub Action Run

bleedingdeacons / guardian / 39512652448
94%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 39512652448

bleedingdeacons / guardian / 39512652448 94%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 39512652448

bleedingdeacons / guardian / 39512652448
94%

README BADGES
x