Remediation for Exposed GCP API keys

[Umut_Enes_Uzun]

Remediation for Exposed GCP API keys
The app is at risk of removal

[vknow360 (Sunny Gupta)]

FCM Legacy API which used Server Key, has been deprecated.
Migrate to Http v1 API as soon as possible.

[PAID] FcmSender: Send FCM notifications and messages using latest HTTP v1 API ($5 or INR 301)

Google announced the deprecation of the FCM legacy HTTP API in favor of the FCM HTTP v1 API. This change is part of Google’s effort to enhance security and improve the functionality of their messaging service.The deprecation was announced on June 27, 2019 and legacy API will no longer be supported starting June 20, 2024. Applications that do not migrate may experience disruptions in their push notification services. The new API uses OAuth2 for authentication, providing better security compared …

The issue is that fcm server key should not be exposed in User app. Make a different app for sending notifications and keep it to yourself.