singInWithCustomToken not working in Firefox with third party cookies disabled

[mwisniewski2000]

[REQUIRED] Describe your environment

• Operating System version: macOs Monterey 12.4
• Browser version: Firefox 107.0 (64-bit)
• Firebase SDK version: 9.14.0
• Firebase Product: auth

[REQUIRED] Describe the problem

Steps to reproduce:

When user blocks all third party cookies on Firefox browser and tries to login with signInWithCustomToken this error shows: FirebaseError: Firebase: Error (auth/network-request-failed)., while when we block third party cookies on chrome everything works perfectly.
Is there some way to make it work, or is it just impossible with third party cookies blocked in firefox?

Relevant Code:

await signInWithCustomToken(auth, token);

[sam-gc]

This is odd, can you check the network panel to see if Firefox is directly blocking the relevant API call? signInWithCredential translates to a straightforward REST call.

[mwisniewski2000]

This is odd, can you check the network panel to see if Firefox is directly blocking the relevant API call? signInWithCredential translates to a straightforward REST call.

In Firefox network tab I can't see any request at all. In chrome with disabled third party cookies I can see this accounts:signInWithCustomToken request.

[prameshj]

In Firefox network tab I can't see any request at all. In chrome with disabled third party cookies I can see this accounts:signInWithCustomToken request.

Interesting, that looks like Firefox might be blocking the network request from happening. Any console logs that hint what might be going on?

[mwisniewski2000]

In Firefox network tab I can't see any request at all. In chrome with disabled third party cookies I can see this accounts:signInWithCustomToken request.

Interesting, that looks like Firefox might be blocking the network request from happening. Any console logs that hint what might be going on?

Just this error I attached in description :(

[abilicz]

Its basically this part of code throwing operation insecure:
this._heartbeatsCachePromise = this._storage.read().then(result => { this._heartbeatsCache = result; return result; }); }
and this promise rejects before making the actual request inside getHeartbeatsHeader
I guess Firefox when third party cookies are blocked is preventing reading and writing to IndexedDB?

[abilicz]

Ok, I think a root cause of the issue is https://developer.mozilla.org/en-US/docs/Web/API/IndexedDB_API/Using_IndexedDB#security.
So here https://github.com/firebase/firebase-js-sdk/blob/master/packages/util/src/environment.ts#L143
accessing indexedDB throws an error which isn't handled

[mwisniewski2000]

I'll close this issue, as it is resolved in this pr: #6841 .