openrtc-trust-firebase-app-check

Optional Firebase App Check evidence for OpenRTC 2.0 device enrollment. The consumer app owns Firebase initialization and passes its AppCheck instance:

import { AppCheckProvider } from 'openrtc-trust-firebase-app-check';

const trust = new AppCheckProvider({ appCheck });
const rtc = OpenRTC({ apiKey, trust: { attestation: trust } });

The adapter uses normal reusable App Check tokens. It never requests limited-use tokens, coalesces concurrent fetches, and honors Firebase's returned expiry. Call invalidate() after a provider rejection if enrollment is retried outside the OpenRTC client.

Firebase App Check proves application integrity for the reusable token session; it does not sign OpenRTC's enrollment challenge. OpenRTC records this adapter as app-session evidence and combines it with its independently challenge-bound install-key proof. Use the consumer-backend assertion path, Apple App Attest, or Play Integrity when a policy requires request-bound evidence.