GCP API Key Leak

Hi guys
When I published an app on google play, I received this warning. Below:

Tradução:
GCP API Key Leak
Detected in APK 1

The app has exposed Google Cloud Platform (GCP) API keys. Read this Google Help Center article for more details.

Vulnerable Locations:

io.kodular.douglasmaueski.AppRevisita.Excluir_Atualizar->lambda58
io.kodular.douglasmaueski.AppRevisita.Excluir_Atualizar->lambda59
io.kodular.douglasmaueski.AppRevisita.Relacao_Revisitas->lambda51
io.kodular.douglasmaueski.AppRevisita.Relacao_Revisitas->lambda52
io.kodular.douglasmaueski.AppRevisita.Screen1->lambda101
io.kodular.douglasmaueski.AppRevisita.Screen1->lambda102
io.kodular.douglasmaueski.AppRevisita.Visualizador->lambda107
io.kodular.douglasmaueski.AppRevisita.Visualizador->lambda108

Has anyone had this error? Would it be in the app or in firebase?
Helppppppppp!!

please tell us about your app, extension you used & the components…

The app does not use any extensions.
The app has no user login.
The app just takes some data from people like:

  • Name
  • Address
  • Date of Visit
  • Telephone

And this data is stored in firebase.

did you export apk after update 1.4B.0
this is solved i this update

Issue with exposed API keys .
The exposed API keys concerned have been removed, and the Google Play Store should no longer show API key warnings on apps made with Kodular.

try to export app now and then publish it

Yes, the app was exported yesterday from Kodular and published yesterday on google play.

Note: Can someone from Kodular Support check? If this last update was fixed, why is Google Play still giving this alert?

In 1.4B.0, we removed an exposed GCP API key from an old deprecated component but there are still other components like Firebase which still have this issue.

2 Likes

Hello, @Conor
What are the effects on my app if I publish to Google Play?

Nothing.
That is just a warning.
You can simply ignore that.

2 Likes

Now I’m calm.
Thanks so much for the information and help.

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.