Início / coding / Perguntas / 79557202
Accepted
angelcervera
Asked: 2025-04-05 23:45:12 +0800 CST

Erro do Firebase: Não é possível sincronizar o estado de autenticação do Firebase

  • 772

Estou usando uma conta de serviço para implantar usando o Firebase CLI da ação do Github.

Este é o conjunto de permissões que esta conta possui:

ROLE
roles/cloudfunctions.admin
roles/firebase.sdkAdminServiceAgent
roles/firebaseauth.admin
roles/iam.serviceAccountTokenCreator
roles/storage.admin

Mas ao implantar, ainda recebo este erro:

⚠  hosting:channel: Unable to add channel domain to Firebase Auth. Visit the Firebase Console at https://console.firebase.google.com/project/XXXXX-dev3/authentication/providers
⚠  hosting:channel: Unable to sync Firebase Auth state.

A propósito: por que pedir para visitar https://console.firebase.google.com/project/XXXXX-dev3/authentication/providers?

1 respostas

  1. Best Answer

    Executei o Firebase CLI com o --debugcomando habilitado. Anexei a saída relacionada ao erro.

    Por qualquer motivo, é necessário adicionar oroles/serviceusage.serviceUsageConsumer

    Agora, funciona com a próxima lista de funções:

    ROLE
roles/cloudfunctions.admin
roles/firebase.sdkAdminServiceAgent
roles/firebaseauth.admin
roles/iam.serviceAccountTokenCreator
roles/serviceusage.serviceUsageConsumer

    Registros:

    2025-04-05T15:35:21.2902860Z [2025-04-05T15:35:21.287Z] >>> [apiv2][query] GET https://identitytoolkit.googleapis.com/admin/v2/projects/XXXXX-dev3/config [none]
2025-04-05T15:35:21.4604631Z [2025-04-05T15:35:21.460Z] <<< [apiv2][status] GET https://identitytoolkit.googleapis.com/admin/v2/projects/XXXXX-dev3/config 403
2025-04-05T15:35:21.4618293Z [2025-04-05T15:35:21.460Z] <<< [apiv2][body] GET https://identitytoolkit.googleapis.com/admin/v2/projects/XXXXX-dev3/config {"error":{"code":403,"message":"Caller does not have required permission to use project XXXXX-dev3. Grant the caller the roles/serviceusage.serviceUsageConsumer role, or a custom role with the serviceusage.services.use permission, by visiting https://console.developers.google.com/iam-admin/iam/project?project=XXXXX-dev3 and then retry. Propagation of the new permission may take a few minutes.","status":"PERMISSION_DENIED","details":[{"@type":"type.googleapis.com/google.rpc.ErrorInfo","reason":"USER_PROJECT_DENIED","domain":"googleapis.com","metadata":{"service":"identitytoolkit.googleapis.com","consumer":"projects/XXXXX-dev3","containerInfo":"XXXXX-dev3"}},{"@type":"type.googleapis.com/google.rpc.LocalizedMessage","locale":"en-US","message":"Caller does not have required permission to use project XXXXX-dev3. Grant the caller the roles/serviceusage.serviceUsageConsumer role, or a custom role with the serviceusage.services.use permission, by visiting https://console.developers.google.com/iam-admin/iam/project?project=XXXXX-dev3 and then retry. Propagation of the new permission may take a few minutes."},{"@type":"type.googleapis.com/google.rpc.Help","links":[{"description":"Google developer console IAM admin","url":"https://console.developers.google.com/iam-admin/iam/project?project=XXXXX-dev3"}]}]}}
2025-04-05T15:35:21.4628029Z ⚠  hosting:channel: Unable to sync Firebase Auth state. 
2025-04-05T15:35:21.4644147Z [2025-04-05T15:35:21.460Z] [hosting] unable to sync auth domain Request to https://identitytoolkit.googleapis.com/admin/v2/projects/XXXXX-dev3/config had HTTP Error: 403, Caller does not have required permission to use project XXXXX-dev3. Grant the caller the roles/serviceusage.serviceUsageConsumer role, or a custom role with the serviceusage.services.use permission, by visiting https://console.developers.google.com/iam-admin/iam/project?project=XXXXX-dev3 and then retry. Propagation of the new permission may take a few minutes. {"name":"FirebaseError","children":[],"context":{"body":{"error":{"code":403,"message":"Caller does not have required permission to use project XXXXX-dev3. Grant the caller the roles/serviceusage.serviceUsageConsumer role, or a custom role with the serviceusage.services.use permission, by visiting https://console.developers.google.com/iam-admin/iam/project?project=XXXXX-dev3 and then retry. Propagation of the new permission may take a few minutes.","status":"PERMISSION_DENIED","details":[{"@type":"type.googleapis.com/google.rpc.ErrorInfo","reason":"USER_PROJECT_DENIED","domain":"googleapis.com","metadata":{"service":"identitytoolkit.googleapis.com","consumer":"projects/XXXXX-dev3","containerInfo":"XXXXX-dev3"}},{"@type":"type.googleapis.com/google.rpc.LocalizedMessage","locale":"en-US","message":"Caller does not have required permission to use project XXXXX-dev3. Grant the caller the roles/serviceusage.serviceUsageConsumer role, or a custom role with the serviceusage.services.use permission, by visiting https://console.developers.google.com/iam-admin/iam/project?project=XXXXX-dev3 and then retry. Propagation of the new permission may take a few minutes."},{"@type":"type.googleapis.com/google.rpc.Help","links":[{"description":"Google developer console IAM admin","url":"https://console.developers.google.com/iam-admin/iam/project?project=XXXXX-dev3"}]}]}},"response":{"statusCode":403}},"exit":1,"message":"Request to https://identitytoolkit.googleapis.com/admin/v2/projects/XXXXX-dev3/config had HTTP Error: 403, Caller does not have required permission to use project XXXXX-dev3. Grant the caller the roles/serviceusage.serviceUsageConsumer role, or a custom role with the serviceusage.services.use permission, by visiting https://console.developers.google.com/iam-admin/iam/project?project=XXXXX-dev3 and then retry. Propagation of the new permission may take a few minutes.","status":403}
    • 1

relate perguntas