getAuthToken error handling for 401 & 404 response code

firebase-installations/api.txt

@@ -38,6 +38,7 @@ package com.google.firebase.installations.local {
   }
 
   public enum PersistedInstallation.RegistrationStatus {
+    enum_constant public static final com.google.firebase.installations.local.PersistedInstallation.RegistrationStatus AUTHENTICATION_TOKEN_ERROR;
     enum_constant public static final com.google.firebase.installations.local.PersistedInstallation.RegistrationStatus NOT_GENERATED;
     enum_constant public static final com.google.firebase.installations.local.PersistedInstallation.RegistrationStatus REGISTERED;
     enum_constant public static final com.google.firebase.installations.local.PersistedInstallation.RegistrationStatus REGISTER_ERROR;
@@ -54,6 +55,7 @@ package com.google.firebase.installations.local {
     method @Nullable public abstract String getRefreshToken();
     method @NonNull public abstract com.google.firebase.installations.local.PersistedInstallation.RegistrationStatus getRegistrationStatus();
     method public abstract long getTokenCreationEpochInSecs();
+    method public boolean isAuthTokenErrored();
     method public boolean isErrored();
     method public boolean isNotGenerated();
     method public boolean isRegistered();
@@ -81,7 +83,7 @@ package com.google.firebase.installations.remote {
     ctor public FirebaseInstallationServiceClient(@NonNull Context);
     method @NonNull public com.google.firebase.installations.remote.InstallationResponse createFirebaseInstallation(@NonNull String, @NonNull String, @NonNull String, @NonNull String);
     method @NonNull public void deleteFirebaseInstallation(@NonNull String, @NonNull String, @NonNull String, @NonNull String);
-    method @NonNull public InstallationTokenResult generateAuthToken(@NonNull String, @NonNull String, @NonNull String, @NonNull String);
+    method @NonNull public com.google.firebase.installations.remote.TokenResult generateAuthToken(@NonNull String, @NonNull String, @NonNull String, @NonNull String);
   }
 
   public abstract class InstallationResponse {
@@ -110,5 +112,28 @@ package com.google.firebase.installations.remote {
     enum_constant public static final com.google.firebase.installations.remote.InstallationResponse.ResponseCode SERVER_ERROR;
   }
 
+  public abstract class TokenResult {
+    ctor public TokenResult();
+    method @NonNull public static com.google.firebase.installations.remote.TokenResult.Builder builder();
+    method @Nullable public abstract com.google.firebase.installations.remote.TokenResult.ResponseCode getResponseCode();
+    method @Nullable public abstract String getToken();
+    method @NonNull public abstract long getTokenExpirationTimestamp();
+    method @NonNull public abstract com.google.firebase.installations.remote.TokenResult.Builder toBuilder();
+  }
+
+  public abstract static class TokenResult.Builder {
+    ctor public TokenResult.Builder();
+    method @NonNull public abstract com.google.firebase.installations.remote.TokenResult build();
+    method @NonNull public abstract com.google.firebase.installations.remote.TokenResult.Builder setResponseCode(@NonNull com.google.firebase.installations.remote.TokenResult.ResponseCode);
+    method @NonNull public abstract com.google.firebase.installations.remote.TokenResult.Builder setToken(@NonNull String);
+    method @NonNull public abstract com.google.firebase.installations.remote.TokenResult.Builder setTokenExpirationTimestamp(long);
+  }
+
+  public enum TokenResult.ResponseCode {
+    enum_constant public static final com.google.firebase.installations.remote.TokenResult.ResponseCode FID_ERROR;
+    enum_constant public static final com.google.firebase.installations.remote.TokenResult.ResponseCode OK;
+    enum_constant public static final com.google.firebase.installations.remote.TokenResult.ResponseCode REFRESH_TOKEN_ERROR;
+  }
+
 }
 

firebase-installations/src/androidTest/java/com/google/firebase/installations/FirebaseInstallationsInstrumentedTest.java

@@ -29,12 +29,12 @@
 import static com.google.firebase.installations.FisAndroidTestConstants.TEST_FID_1;
 import static com.google.firebase.installations.FisAndroidTestConstants.TEST_INSTALLATION_RESPONSE;
 import static com.google.firebase.installations.FisAndroidTestConstants.TEST_INSTALLATION_RESPONSE_WITH_IID;
-import static com.google.firebase.installations.FisAndroidTestConstants.TEST_INSTALLATION_TOKEN_RESULT;
 import static com.google.firebase.installations.FisAndroidTestConstants.TEST_INSTANCE_ID_1;
 import static com.google.firebase.installations.FisAndroidTestConstants.TEST_PROJECT_ID;
 import static com.google.firebase.installations.FisAndroidTestConstants.TEST_REFRESH_TOKEN;
 import static com.google.firebase.installations.FisAndroidTestConstants.TEST_TOKEN_EXPIRATION_TIMESTAMP;
 import static com.google.firebase.installations.FisAndroidTestConstants.TEST_TOKEN_EXPIRATION_TIMESTAMP_2;
+import static com.google.firebase.installations.FisAndroidTestConstants.TEST_TOKEN_RESULT;
 import static com.google.firebase.installations.local.PersistedInstallationEntrySubject.assertThat;
 import static org.junit.Assert.fail;
 import static org.mockito.ArgumentMatchers.any;
@@ -59,6 +59,7 @@
 import com.google.firebase.installations.local.PersistedInstallation.RegistrationStatus;
 import com.google.firebase.installations.local.PersistedInstallationEntry;
 import com.google.firebase.installations.remote.FirebaseInstallationServiceClient;
+import com.google.firebase.installations.remote.TokenResult;
 import java.util.concurrent.ExecutionException;
 import java.util.concurrent.ExecutorService;
 import java.util.concurrent.LinkedBlockingQueue;
@@ -174,7 +175,7 @@ public void setUp() throws FirebaseException {
     // Mocks successful auth token generation
     when(backendClientReturnsOk.generateAuthToken(
             anyString(), anyString(), anyString(), anyString()))
-        .thenReturn(TEST_INSTALLATION_TOKEN_RESULT);
+        .thenReturn(TEST_TOKEN_RESULT);
 
     when(persistedInstallationReturnsError.insertOrUpdatePersistedInstallationEntry(any()))
         .thenReturn(false);
@@ -588,6 +589,41 @@ public void testGetAuthToken_unregisteredFid_fetchedNewTokenFromFIS() throws Exc
         .createFirebaseInstallation(TEST_API_KEY, TEST_FID_1, TEST_PROJECT_ID, TEST_APP_ID_1);
   }
 
+  @Test
+  public void testGetAuthToken_fidError_persistedInstallationCleared() throws Exception {
+    // Update local storage with an expired installation entry to ensure that generate auth token
+    // is called.
+    persistedInstallation.insertOrUpdatePersistedInstallationEntry(EXPIRED_AUTH_TOKEN_ENTRY);
+    // Mocks error during auth token generation
+    when(backendClientReturnsOk.generateAuthToken(
+            anyString(), anyString(), anyString(), anyString()))
+        .thenReturn(
+            TokenResult.builder().setResponseCode(TokenResult.ResponseCode.FID_ERROR).build());
+    when(mockUtils.isAuthTokenExpired(REGISTERED_INSTALLATION_ENTRY)).thenReturn(true, false);
+
+    FirebaseInstallations firebaseInstallations = getFirebaseInstallations();
+
+    // Expect exception
+    try {
+      Tasks.await(firebaseInstallations.getAuthToken(FirebaseInstallationsApi.FORCE_REFRESH));
+      fail("getAuthToken() failed due to Server Error.");
+    } catch (ExecutionException expected) {
+      assertWithMessage("Exception class doesn't match")
+          .that(expected)
+          .hasCauseThat()
+          .isInstanceOf(FirebaseInstallationsException.class);
+      assertWithMessage("Exception status doesn't match")
+          .that(((FirebaseInstallationsException) expected.getCause()).getStatus())
+          .isEqualTo(FirebaseInstallationsException.Status.CLIENT_ERROR);
+    }
+
+    verify(backendClientReturnsOk, times(1))
+        .generateAuthToken(TEST_API_KEY, TEST_FID_1, TEST_PROJECT_ID, TEST_REFRESH_TOKEN);
+    PersistedInstallationEntry updatedInstallationEntry =
+        persistedInstallation.readPersistedInstallationEntryValue();
+    assertThat(updatedInstallationEntry).hasRegistrationStatus(RegistrationStatus.NOT_GENERATED);
+  }
+
   @Test
   public void testGetAuthToken_serverError_failure() throws Exception {
     when(mockPersistedInstallation.readPersistedInstallationEntryValue())
@@ -662,19 +698,19 @@ public void testGetAuthToken_multipleCallsForceRefresh_fetchedNewTokenTwice() th
             AdditionalAnswers.answersWithDelay(
                 500,
                 (unused) ->
-                    InstallationTokenResult.builder()
+                    TokenResult.builder()
                         .setToken(TEST_AUTH_TOKEN_3)
                         .setTokenExpirationTimestamp(TEST_TOKEN_EXPIRATION_TIMESTAMP)
-                        .setTokenCreationTimestamp(TEST_CREATION_TIMESTAMP_1)
+                        .setResponseCode(TokenResult.ResponseCode.OK)
                         .build()))
         .doAnswer(
             AdditionalAnswers.answersWithDelay(
                 500,
                 (unused) ->
-                    InstallationTokenResult.builder()
+                    TokenResult.builder()
                         .setToken(TEST_AUTH_TOKEN_4)
                         .setTokenExpirationTimestamp(TEST_TOKEN_EXPIRATION_TIMESTAMP)
-                        .setTokenCreationTimestamp(TEST_CREATION_TIMESTAMP_1)
+                        .setResponseCode(TokenResult.ResponseCode.OK)
                         .build()))
         .when(backendClientReturnsOk)
         .generateAuthToken(anyString(), anyString(), anyString(), anyString());

firebase-installations/src/androidTest/java/com/google/firebase/installations/FisAndroidTestConstants.java

@@ -17,6 +17,7 @@
 import com.google.firebase.installations.local.PersistedInstallationEntry;
 import com.google.firebase.installations.remote.InstallationResponse;
 import com.google.firebase.installations.remote.InstallationResponse.ResponseCode;
+import com.google.firebase.installations.remote.TokenResult;
 
 public final class FisAndroidTestConstants {
   public static final String TEST_FID_1 = "cccccccccccccccccccccc";
@@ -82,6 +83,13 @@ public final class FisAndroidTestConstants {
           .setTokenCreationTimestamp(TEST_CREATION_TIMESTAMP_1)
           .build();
 
+  public static final TokenResult TEST_TOKEN_RESULT =
+      TokenResult.builder()
+          .setToken(TEST_AUTH_TOKEN_2)
+          .setTokenExpirationTimestamp(TEST_TOKEN_EXPIRATION_TIMESTAMP)
+          .setResponseCode(TokenResult.ResponseCode.OK)
+          .build();
+
   public static final InstallationResponse SERVER_ERROR_INSTALLATION_RESPONSE =
       InstallationResponse.builder().setResponseCode(ResponseCode.SERVER_ERROR).build();
 }

firebase-installations/src/main/java/com/google/firebase/installations/FirebaseInstallations.java

@@ -31,6 +31,7 @@
 import com.google.firebase.installations.remote.FirebaseInstallationServiceClient;
 import com.google.firebase.installations.remote.InstallationResponse;
 import com.google.firebase.installations.remote.InstallationResponse.ResponseCode;
+import com.google.firebase.installations.remote.TokenResult;
 import java.util.ArrayList;
 import java.util.Iterator;
 import java.util.List;
@@ -270,6 +271,19 @@ private final void doRegistration() {
         }
       }
 
+      // If persisted fid is in AUTH_TOKEN_ERROR state, clear the stored fid and update the
+      // listener with an exception.
+      if (persistedInstallationEntry.isAuthTokenErrored()) {
+        persistedInstallation.clear();
+        triggerOnException(
+            persistedInstallationEntry,
+            new FirebaseInstallationsException(
+                "Failed to generate auth token for this Firebase Installation. Call getId() "
+                    + "to recreate a new Fid and a valid auth token.",
+                FirebaseInstallationsException.Status.CLIENT_ERROR));
+        return;
+      }
+
       triggerOnStateReached(persistedInstallationEntry);
     } catch (Exception e) {
       PersistedInstallationEntry persistedInstallationEntry =
@@ -345,28 +359,37 @@ private Void registerAndSaveFid(PersistedInstallationEntry persistedInstallation
   }
 
   /** Calls the FIS servers to generate an auth token for this Firebase installation. */
-  private InstallationTokenResult fetchAuthTokenFromServer(
-      PersistedInstallationEntry persistedInstallationEntry) throws FirebaseInstallationsException {
+  private void fetchAuthTokenFromServer(PersistedInstallationEntry persistedInstallationEntry)
+      throws FirebaseInstallationsException {
     try {
       long creationTime = utils.currentTimeInSecs();
-      InstallationTokenResult tokenResult =
+      TokenResult tokenResult =
           serviceClient.generateAuthToken(
               /*apiKey= */ firebaseApp.getOptions().getApiKey(),
               /*fid= */ persistedInstallationEntry.getFirebaseInstallationId(),
               /*projectID= */ firebaseApp.getOptions().getProjectId(),
               /*refreshToken= */ persistedInstallationEntry.getRefreshToken());
 
-      persistedInstallation.insertOrUpdatePersistedInstallationEntry(
-          PersistedInstallationEntry.builder()
-              .setFirebaseInstallationId(persistedInstallationEntry.getFirebaseInstallationId())
-              .setRegistrationStatus(RegistrationStatus.REGISTERED)
-              .setAuthToken(tokenResult.getToken())
-              .setRefreshToken(persistedInstallationEntry.getRefreshToken())
-              .setExpiresInSecs(tokenResult.getTokenExpirationTimestamp())
-              .setTokenCreationEpochInSecs(creationTime)
-              .build());
-
-      return tokenResult;
+      if (tokenResult.getResponseCode() == TokenResult.ResponseCode.FID_ERROR
+          || tokenResult.getResponseCode() == TokenResult.ResponseCode.REFRESH_TOKEN_ERROR) {
+        persistedInstallation.insertOrUpdatePersistedInstallationEntry(
+            persistedInstallationEntry
+                .toBuilder()
+                .setRegistrationStatus(RegistrationStatus.AUTHENTICATION_TOKEN_ERROR)
+                .build());
+      }
+
+      if (tokenResult.getResponseCode() == TokenResult.ResponseCode.OK) {
+        persistedInstallation.insertOrUpdatePersistedInstallationEntry(
+            persistedInstallationEntry
+                .toBuilder()
+                .setRegistrationStatus(RegistrationStatus.REGISTERED)
+                .setAuthToken(tokenResult.getToken())
+                .setExpiresInSecs(tokenResult.getTokenExpirationTimestamp())
+                .setTokenCreationEpochInSecs(creationTime)
+                .build());
+      }
+
     } catch (FirebaseException exception) {
       throw new FirebaseInstallationsException(
           "Failed to generate auth token for a Firebase Installation.",

firebase-installations/src/main/java/com/google/firebase/installations/GetAuthTokenListener.java

@@ -48,7 +48,7 @@ public boolean onStateReached(
   @Override
   public boolean onException(
       PersistedInstallationEntry persistedInstallationEntry, Exception exception) {
-    if (persistedInstallationEntry.isErrored()) {
+    if (persistedInstallationEntry.isErrored() || persistedInstallationEntry.isAuthTokenErrored()) {
       resultTaskCompletionSource.trySetException(exception);
       return true;
     }

firebase-installations/src/main/java/com/google/firebase/installations/local/PersistedInstallation.java

@@ -53,6 +53,7 @@ public enum RegistrationStatus {
      * locally before registering with FIS servers.
      */
     REGISTER_ERROR,
+    AUTHENTICATION_TOKEN_ERROR,
   }
 
   private static final String SHARED_PREFS_NAME = "PersistedInstallation";

firebase-installations/src/main/java/com/google/firebase/installations/local/PersistedInstallationEntry.java

@@ -60,6 +60,11 @@ public boolean isNotGenerated() {
     return getRegistrationStatus() == PersistedInstallation.RegistrationStatus.NOT_GENERATED;
   }
 
+  public boolean isAuthTokenErrored() {
+    return getRegistrationStatus()
+        == PersistedInstallation.RegistrationStatus.AUTHENTICATION_TOKEN_ERROR;
+  }
+
   @NonNull
   public abstract Builder toBuilder();
 

firebase-installations/src/main/java/com/google/firebase/installations/remote/FirebaseInstallationServiceClient.java

@@ -200,7 +200,7 @@ public void deleteFirebaseInstallation(
    * @param refreshToken a token used to authenticate FIS requests
    */
   @NonNull
-  public InstallationTokenResult generateAuthToken(
+  public TokenResult generateAuthToken(
       @NonNull String apiKey,
       @NonNull String fid,
       @NonNull String projectID,
@@ -228,6 +228,17 @@ public InstallationTokenResult generateAuthToken(
         if (httpResponseCode == 200) {
           return readGenerateAuthTokenResponse(httpsURLConnection);
         }
+
+        if (httpResponseCode == 401) {
+          return TokenResult.builder()
+              .setResponseCode(TokenResult.ResponseCode.REFRESH_TOKEN_ERROR)
+              .build();
+        }
+
+        if (httpResponseCode == 404) {
+          return TokenResult.builder().setResponseCode(TokenResult.ResponseCode.FID_ERROR).build();
+        }
+
         // Usually the FIS server recovers from errors: retry one time before giving up.
         if (httpResponseCode >= 500 && httpResponseCode < 600) {
           retryCount++;
@@ -295,10 +306,9 @@ private InstallationResponse readCreateResponse(HttpsURLConnection conn) throws
   }
 
   // Read the response from the generateAuthToken FirebaseInstallation API.
-  private InstallationTokenResult readGenerateAuthTokenResponse(HttpsURLConnection conn)
-      throws IOException {
+  private TokenResult readGenerateAuthTokenResponse(HttpsURLConnection conn) throws IOException {
     JsonReader reader = new JsonReader(new InputStreamReader(conn.getInputStream(), UTF_8));
-    InstallationTokenResult.Builder builder = InstallationTokenResult.builder();
+    TokenResult.Builder builder = TokenResult.builder();
     reader.beginObject();
     while (reader.hasNext()) {
       String name = reader.nextName();
@@ -312,7 +322,7 @@ private InstallationTokenResult readGenerateAuthTokenResponse(HttpsURLConnection
     }
     reader.endObject();
 
-    return builder.build();
+    return builder.setResponseCode(TokenResult.ResponseCode.OK).build();
   }
 
   // Read the error message from the response.