ios – Hassle authenticating from Flutter to a Gen 2 Cloud Run perform—Invoker function granted, however requests nonetheless fail

I am attempting to name a Gen 2 Cloud Run perform from my Flutter app. I’ve already granted the “Cloud Run Invoker” function to all customers (successfully permitting unauthenticated invocations), however I’m nonetheless getting 403 errors or related authentication points in xcode after I take a look at my utility.
After I add a single line to bypass validation on the Cloud Run aspect, all the things works high quality, which leads me to suspect that my Firebase Auth logic is perhaps incorrect or the token isn’t being handed correctly. Right here’s the related snippet from my AuthService class the place I purchase the token and try to name the Cloud Features endpoint:

right here is the place it’s assigned at login

Future signInWithEmail(String e mail, String password) async {


remaining consumer = userCredential.consumer;
if (consumer == null) {
  throw Exception('Signal-in failed, no consumer returned');
}

// Pressure refresh of the ID token after login:
remaining idToken = await consumer.getIdToken(true);
debugPrint('Efficiently obtained recent ID token: ${idToken.substring(0, 20)}...');

return consumer;

and that is an instance perform name

  remaining consumer = FirebaseAuth.occasion.currentUser;

  // If the consumer is not signed in, deal with it or present an error:
  if (consumer == null) {
    debugPrint('No consumer discovered; can't confirm subscription');
    return;
  }

  // Optionally refresh the token once more, if wanted:
  remaining refreshedToken = await consumer.getIdToken(true);
  debugPrint('Refreshed token earlier than calling perform: ${refreshedToken.substring(0, 20)}...');

  strive {
    // Name your safe Firebase Perform / Cloud Run endpoint right here
    // (That is simply an instance – your precise name could differ)
    remaining consequence = await _firebaseService.callFunction('validateIosPurchase', {
      'receipt': /* iOS receipt information */,
      'subscriptionId': buy.productID,
      'debug': false,
    });

    debugPrint('Buy verified: $consequence');

    // …carry out further logic, e.g. updating premium standing…
  } catch (e) {
    debugPrint('Buy verification error: $e');
    rethrow; // or deal with the error
  }
}