Apple warning `UIWebView`

[cipriancaba]

Issue

Apple started issuing warnings for libs that use the deprecated UIWebView. Firebase Authentication depends on FirAuth that references this old api

Is is to be expected for Apple to start rejecting apps that use this api.

A commit has already been pushed to firebase auth repo
firebase/firebase-ios-sdk#3723

React native discussion
react-native-webview/react-native-webview#819

We should aim to push an updated dependency as soon as Firebase Auth releases a new version

---

Project Files

iOS

Click To Expand

ios/Podfile:

• I'm not using Pods
• I'm using Pods and my Podfile looks like:

pod 'RNFBAuth', :path => "#{nm_path}@react-native-firebase/auth/ios"

---

Environment

Click To Expand

react-native info output:

react-native info
warn The following packages use deprecated "rnpm" config that will stop working from next release:
  - react-native-maps: https://npmjs.com/package/react-native-maps
Please notify their maintainers about it. You can find more details at https://github.com/react-native-community/cli/blob/master/docs/configuration.md#migration-guide.
info Fetching system and libraries information...
System:
    OS: macOS 10.14.6
    CPU: (12) x64 Intel(R) Core(TM) i9-8950HK CPU @ 2.90GHz
    Memory: 8.65 GB / 32.00 GB
    Shell: 3.2.57 - /bin/bash
  Binaries:
    Node: 12.6.0 - /usr/local/bin/node
    Yarn: 1.16.0 - /usr/local/bin/yarn
    npm: 6.9.0 - /usr/local/bin/npm
    Watchman: 4.9.0 - /usr/local/bin/watchman
  SDKs:
    iOS SDK:
      Platforms: iOS 12.4, macOS 10.14, tvOS 12.4, watchOS 5.3
    Android SDK:
      API Levels: 23, 24, 25, 26, 27, 28
      Build Tools: 23.0.1, 24.0.3, 25.0.2, 25.0.3, 26.0.1, 26.0.2, 26.0.3, 27.0.3, 28.0.1, 28.0.3
      System Images: android-24 | Google APIs Intel x86 Atom, android-27 | Intel x86 Atom_64, android-28 | Google APIs Intel x86 Atom
  IDEs:
    Android Studio: 3.4 AI-183.6156.11.34.5522156
    Xcode: 10.3/10G8 - /usr/bin/xcodebuild
  npmPackages:
    react-native: 0.60.4 => 0.60.4

• Platform that you're experiencing the issue on:
  • iOS
  • Android
  • iOS but have not tested behavior on Android
  • Android but have not tested behavior on iOS
  • Both
• react-native-firebase version you're using that has this issue:
  • e.g. 5.4.3
• Firebase module(s) you're using that has the issue:
  • e.g. Instance ID
• Are you using TypeScript?
  • Y/N

---

Think react-native-firebase is great? Please consider supporting all of the project maintainers and contributors by donating via our Open Collective where all contributors can submit expenses. [Learn More]

• 👉 Check out React Native Firebase and Invertase on Twitter for updates on the library.

[Ehesp]

Thanks for the report. Once the SDK version is released we'll get it tested and updated with a release.

[mikehardy]

I'm not actually sure there is anything to do? Once it's released you just pod outdated to see it and pod update to install it? v6 and v5.x.x of react-native-firebase support the current release line of the underlying SDKs

[mikehardy]

Just watch here since they cherry-picked to their 6.8.0 pending release. Once you see 6.8.0 install it https://firebase.google.com/support/release-notes/ios

Also, this is an App Store warning, not a fail. They'll keep accepting these submissions for now. It's also affecting react-native-webview and react-native-device-info at minimum.

[cipriancaba]

I assume that the auth package needs to update this dependency

react-native-firebase/packages/auth/RNFBAuth.podspec

Line 20 in ec85e5e

s.dependency 'Firebase/Auth', '~> 6.5.0'

Re react-native-webview and react-native-device-info they both posted fixes

[Ehesp]

Yeah on v6 we hard set the versions so that will need changing, v5 should be do-able via updating pods yourself.

[mikehardy]

oh my - I haven't used v6 yet, the dependencies are coded into each subspec in the packages? they are not configurable in the main app podspec 😱

I am sure there are reasons for that design (like, making it so people don't have to think about adding dependencies...) but I'd hack up a pre script in my main app podspec to control the dependencies personally. sorta like this but moving versions or similar https://guides.cocoapods.org/syntax/podfile.html#pre_install - but I'm pretty touchy about being able to control my own versions

[mikehardy]

also I can't imagine trying to track the ios sdk releases? e.g., firestore 6.7.1 is out and fixes a crash bug, if they release that sdk over the weekend is there some expectation you cut a release to match contemporaneously? or recommend patch-package? 🤔 - seems like a really tight coupling on something otherwise not in control

[Ehesp]

Let me get back to you on the specifics. You can override the RNFB versions yourself though. I'll speak with @Salakar - probably one to document too.

[quachsimon]

What is the current status of this warning? Our team is also running into this and points to FIRAuth. We are on v5.4.3 of RNFirebase.

Would we simply update the Podfile Firebase/Auth dependency?

[mikehardy]

They are fixing things on a very rapid basis - for instance a difference between Firebase iOS SDK release 6.8.0 and 6.8.1 was related to this even, https://firebase.google.com/support/release-notes/ios#version_681_-_september_10_2019 - just a few days ago.

My best recommendation is to get completely current, even though I recognize this means ingesting some breaking changes - read the release notes carefully for react-native-firebase v5.5.0 (on your way to v5.5.6 and Pods 6.8.1)

[mikehardy]

@quachsimon that was for you - I believe the original reporter was for react-native-firebase v6, which just had a "pod overrides" PR proposed by @Ehesp #2589

[quachsimon]

Thanks @mikehardy. Will look into updating to react-native-firebase v5.5.6.

After that, I can just change my Firebase/Auth pod to 6.8.1? From the docs it suggests to lock in 6.2.0 for v5.5.x. This should be ok?

[mikehardy]

Oh dang - my documentation is in conflict. My goal with v5.x react-native-firebase maintenance is to allow use of the most up to date underlying SDKs, even if that means small breaking changes in RNFB. I'm personally on 6.8.1 and it's okay.

I updated this table to just be '6.x' for the pods https://rnfirebase.io/docs/v5.x.x/getting-started#Supported-versions---React-Native-/-Firebase and I will update that doc to say that it is best to pin your version yes, but also periodically run pod outdated and update the pods assuming they haven't done breaking changes (so, in the 6.x ios pod range)

So TLDR - 6.8.1 should be okay. If you are on react-native 0.60+ you must use the branch v5.x.x from git as there is a patch needed to make it work with AndroidX that we haven't released yet #2476

[mikehardy]

See if this is more clear: invertase/react-native-firebase-docs#217 - if you like it, you can say so on the PR and I'll merge. Open to any wording suggestions of course