身份工具包 API 配置返回“CONFIGURATION_NOT_FOUND”

Question

. Answers to this question are eligible for a +100 reputation bounty. Bounty grace period ends in 20 hours . F.SO7 is looking for a to this question:

This question is important for those who try to automate the process of creating Firebase and GCP accounts, and would like to enable authentication to it (Firebase Auth for example).

The current answers/comments are probably in the right direction, but needs some more in-depth information in order to solve the problem in all use cases.

I am trying to enable Firebase Authentication in my project, and to add Phone Auth to it, via API (without using the GUI console).

I am using the Service Usage API in order to enable Identity Toolkit , and then trying to use Identity Toolkit API in order to add the Phone Auth .

I am enabling Identity Toolkit via the Service Usage API like this (POST request):

URL :

https://serviceusage.googleapis.com/v1/projects/MY_GCP_PROJ/services:batchEnable

Body :

{
  "serviceIds": ["identitytoolkit"]
}

And indeed, after running this request I see in GCP console that Identity Toolkit has been enabled.

After that, I try to update the config using Identity Toolkit API , like this (PATCH request):

URL :

https://identitytoolkit.googleapis.com/v2/projects/MY_GCP_PROJ/config?updateMask=signIn

Body :

{
    "signIn": {
        "phoneNumber": {
            "enabled": true,
            "testPhoneNumbers": {
                "+11111111111": "123456",
            }
        },
    }
}

But for some reason, I receive an error saying:

{
    "error": {
        "code": 404,
        "message": "CONFIGURATION_NOT_FOUND",
        "status": "NOT_FOUND"
    }
}

I can't understand why the Identity Toolkit API cannot find the configuration and update it as specified.

Does anyone know how it can be solved?

Thank you

Update - pipeline responses

Update 2 - service account permissions

App Engine Admin

App Engine flexible environment Service Agent

Cloud Datastore Index Admin

Cloud Datastore User

Cloud Deploy Admin

Cloud Deploy Service Agent

Cloud Functions Service Agent

Cloud Storage for Firebase Admin

Cloud Storage for Firebase Service Agent

Firebase Admin

Firebase Admin SDK Administrator Service Agent

Firebase Authentication Admin

Firebase Authentication Viewer

Firebase Cloud Messaging API admin

Firebase Develop Admin

Firebase Extensions API Service Agent

Firebase Remote Config Admin

Firebase Rules Admin

Firebase SDK Provisioning Service Agent

Firebase Service Management Service Agent

Firestore Service Agent

Google Batch service agent

Identity Platform Admin

Identity Platform Viewer

Identity Toolkit Admin

Identity Toolkit Viewer

Organisation Administrator

Owner

Storage Object Admin

Answer 1

Ok, the following works for me.

Per discussion, you must enable identitytoolkit in the Firebase project:

SERVICE="identitytoolkit"
gcloud services enable ${SERVICE}.googleapis.com \
--project=${PROJECT}

# verify:

gcloud services list \
--enabled \
--project=${PROJECT} \
--filter=config.name=${SERVICE}.googleapis.com \
--format="value(state)"
# Want: ENABLED

Then:

PROJECT="[YOUR-FIREBASE-AUTH-PROJECT]"
ACCOUNT="[YOUR-SERVICE-ACCOUNT]"
EMAIL="${ACCOUNT}@${PROJECT}.iam.gserviceaccount.com"

TOKEN=$(gcloud auth print-access-token ${EMAIL}

DATA='
{
  "signIn":{
    "phoneNumber":{
      "enabled":true,
      "testPhoneNumbers":{
        "+11111111111":"123456"
      }
    }
  }
}
'

curl \
--silent \
--request PATCH \
--header "Authorization: Bearer ${TOKEN}" \
--header "Content-Type: application/json" \
--header "Accept: application/json" \
--data "${DATA}" \
https://identitytoolkit.googleapis.com/v2/projects/${PROJECT}/config?updateMask=signIn

Then:

curl \
--silent \
--request GET \
--header "Authorization: Bearer ${TOKEN}" \
--header "Accept: application/json" \
https://identitytoolkit.googleapis.com/v2/projects/${PROJECT}/config \
| jq -r .signIn.phoneNumber
{
  "enabled": true,
  "testPhoneNumbers": {
    "+11111111111": "123456"
  }
}

Answer 2

The same issue happened to me when I was trying to use REST API but then I get to know that the URL I am using was wrong. Try Method: projects.updateConfig