App Check with Play Integrity provider consistently returns 403

[golfnaa-maker]

Description:
App Check with Play Integrity provider consistently returns 403 "App attestation failed"
for 100% of requests over 4+ days, despite:

• Device passes all Play Integrity Device Checker verdicts (MEETS_STRONG_INTEGRITY)
• Correct SHA-256 fingerprint registered in App Check
• Correct Google Cloud project (401764899850) linked in Play Console
• App downloaded via Google Play internal testing track (not sideloaded)
• Tested on multiple non-rooted devices
• App Check metrics in Firebase Console show 0% verified requests consistently

Project details:

• Firebase project ID: dreampredictorapp
• Android package name: com.intjappication.dreampredictor
• SDK: firebase-appcheck-playintegrity (via firebase-ai / firebase-bom 34.15.0)

Error log:
com.google.firebase.FirebaseException: Error returned from API. code: 403 body: App attestation failed.
at com.google.firebase.appcheck.playintegrity.internal.PlayIntegrityAppCheckProvider...

[lehcar09]

Hi @golfnaa-maker, thank you for reaching out. 403 errors usually means that the provided token is invalid, missing, or lacks the necessary permissions. For now, I suggest checking on the following items that might be causing the 403 issue:

• Check API Key Restrictions: Verify that the API key used for Google Play Integrity is not restricted and has the necessary permissions for the Firebase App Check API.
• SHA-1 Certificate Fingerprint: Ensure the correct SHA-1 certificate fingerprint is configured in the Firebase console.
• App Signing: If using app signing by Google Play, verify that the correct app signing certificate is used.

Please do keep in mind that our SDK support team does not have access to the backend or your project details. To get better help, it would be best to reach out to the Firebase support channel instead. We'd need access to your project settings (including projectID, SHA-1 etc) to troubleshoot this type of issue.

[golfnaa-maker]

@lehcar09 Thank you for the suggestions. I checked both items:

• API key restrictions: The "Android key (auto created by Firebase)"
  now includes Google Play Integrity API in its restrictions (verified
  the key value matches google-services.json)
• SHA-1 certificate fingerprint: Verified it's correctly registered
  in Firebase App Check, matching the App Signing key (not the upload
  key) from Play Console

Unfortunately the issue still persists — still getting 403 "App
attestation failed" for 100% of requests. I'll reach out to the
Firebase support channel as suggested. Thanks again for your help.