Identity Toolkit API v3 (verifyCustomToken)

Identity Toolkit API v3 (verifyCustomToken) (google/identitytoolkit-relyingparty-verifycustomtoken)

operated by: Google LLC (get company information on datarequests.org)

Endpoint URLs

These are URLs or regexes of endpoints the tracker sends data to. We use these to determine which adapter to apply to a request. Some trackers use the same endpoint for several formats. In this case we use additional logic to match the adapter to the request, refer to the code for more information.
  • https://www.googleapis.com/identitytoolkit/v3/relyingparty/verifyCustomToken

Decoding steps

Every tracking library has its own way of transmitting tracking data, often even several. They are regularly pretty convoluted, nested encoding schemes. Because of that, the adapter needs to decode the request information into a consistent format. We try to keep keys and paths intact, but the structure results from our decoding. All steps used in the decoding for this adapter are documented here.
  1. Parse the request body as JSON. Store that in the result for the request body.
  2. Decode the result for the request body at token as a JSON Web Token (JWT). Replace the existing value.
  3. Get the property at JSONPath $ in the request headers. Store that in the result for the request headers.
1res.body = parseJson(body)
2res.body.token = decodeJwt(res.body.token)
3res.header = header.$

Observed data transmissions

This is data that we observed being transmitted by this tracker. Not every request contains all of this data. The context of the data describes where we found the data in the request, the path describes the location of the data in the decoded request. The examples are a selection of observed values.
PropertyContextPathExamples of observed values
App IDheaderx-requested-with
headerX-Android-Packagecom.tranzmate
com.yantech.zoomerang
com.funtomic.matchmasters
com.geode.dazzly
com.colt
headerx-ios-bundle-identifiercom.funtomic.matchmasters
de.aramark.new
com.yantech.zoomerang
lma.Mixgram
coolz.Wisuki
Tracker SDK versionheaderx-client-versionAndroid/Fallback/X20000001/FirebaseCore-Android
iOS/FirebaseSDK/8.9.1/FirebaseCore-iOS
Android/Fallback/X21000001/FirebaseCore-Android
iOS/FirebaseSDK/8.14.0/FirebaseCore-iOS
iOS/FirebaseSDK/8.8.0/FirebaseCore-iOS
headerX-Client-VersionAndroid/Fallback/X20000001/FirebaseCore-Android
iOS/FirebaseSDK/8.9.1/FirebaseCore-iOS
Android/Fallback/X21000001/FirebaseCore-Android
iOS/FirebaseSDK/8.14.0/FirebaseCore-iOS
iOS/FirebaseSDK/8.8.0/FirebaseCore-iOS
headerx-firebase-clientapple-platform/ios apple-sdk/19E239 appstore/true deploy/cocoapods device/iPhone9,3 fire-analytics/8.14.0 fire-auth/8.14.0 fire-dl/8.14.0 fire-fcm/8.14.0 fire-fst/8.14.0 fire-install/8.14.0 fire-ios/8.14.0 firebase-crashlytics/8.14.0 os-version/14.8 xcode/13E113
Unique user IDbodytoken.uid More details on how we identified this propertyB96E51C9A43B532EE0530100007F7D2D
6245d5bca6d3fc67b4eb2e47
709c84ecd52cadb9
62470f55c336398d980293ef
$DazzlyAnonymousID:708ca387-6f82-4c34-83c9-0b5a973df7e6