1

I pushed an app to production, and it shows the following error in the google play console.

Leaked GCP API Keys Your app contains exposed Google Cloud Platform (GCP) API keys. Please see this Google Help Center article for details.

com.example.tools.homeScreen.MainActivity->onCreate

I tried adding this line of code in the build gradle file and specifying the keys in the local.properties file. But it didn't work.

 buildConfigField("String", "sender_id", "\"" + localProperties['SENDER_ID'] + "\"")
Justin Poehnelt
  • 2,992
  • 1
  • 19
  • 23
Valencio Araujo
  • 11
  • 2
  • *firebaser here* It sounds like you've included the FCM server keys in your Android app, which is not secure. Calls to the FCM REST API require that you specify the FCM *server* key in your code. As its name implies, this key should only be used in server-side code, or in an otherwise trusted environment. The reason for this is that anyone who has the FCM server key can send whatever message they want to all of your users. By including this key in your Android app, a malicious user can find it and you're putting your users at risk. See https://stackoverflow.com/a/37993724 for a better solution – Frank van Puffelen Feb 15 '22 at 14:29
  • I am facing the same issue. not getting any solution – Gulnaz Ghanchi Apr 25 '22 at 19:42

0 Answers0