You must assign the Invoker role (roles/run.invoker) through Cloud Run for 2nd gen functions
I'm trying to invoke my Gen 2 Firebase function from my IOS app.
It has been working fine for several months, until I redeployed it today, and now all of a sudden, users from my app receive Unauthenticated when trying to invoke it.
I granted the allUsers &Cloud Functions Invoker (1) principal to my function, but now it gives me this warning:
The specified principal roles/run.invoker is nowhere to be found.
My users can't access the function. Does google deliberately make things more complicated than they should be?
At the top right of your Gen 2 Cloud Function details, you should see a badge: “Powered by Cloud Run,” along with the Cloud Run service name at the bottom. Remember this service name.
Next, open Serverless -> Cloud Run in the left menu. 
You will see a list of Cloud Run services. Find your Cloud Run service and check the checkbox next to it. A panel will appear at the top with the message “1 service selected” and buttons like Copy, Delete, and Permissions. 
. Click Permissions. The permissions panel for this Cloud Run service will appear on the right. Here, you can assign the Cloud Run Invoker role to the required service account.
I would also suggest removing the allUsers permission from the original Cloud Function to avoid unexpected security consequences.
- Iterate through all users - firestore
- functions/lib/functions/src/index.ts does not exist, can't deploy Cloud Functions
- Don't delete firebase cloud funtions
- Is there a way to suppress Firebase Functions Firestore triggers?
- How do I lazy load dependencies for cloud functions that are split in single files?
- Is there a way to check which SA key has been used by a service account for a request?
- Uploading images to Firebase storage returns "Access denied" after some time
- Generating Cloud Storage Signed URL from Google Cloud Function without using explicit key file
- How to execute a Cloud Function after Dataflow job has succeeded?
- Firebase ID token has incorrect "aud" (audience) claim when authenticating Firebase function to function calls
- Firebase Phone authentication test num working but real phone num showing [BILLING_NOT_ENABLED]
- Calling Firebase Cloud Functions from Flutter gives 'The data couldn’t be read because it isn’t in the correct format.'
- How can I get traceId in a Firebase cloud function?
- Implementing Retry Mechanism in Firebase Function Gen 2 HTTP onRequest
- Firebase Functions NOT_FOUND for europe regions
- Firebase functions config won't deploy
- Deploying Go subpackages to Google Cloud Functions fails
- You must assign the Invoker role (roles/run.invoker) through Cloud Run for 2nd gen functions
- Firebase onCall functions and Google Cloud Functions authentication showing call is unauthenticated
- Send firebase push notification programmatically
- How do I call a callable v2 Cloud Function in Flutter?
- Firebase https onCall function blocked by cors
- Firebase Cloud Functions V2: A user creation trigger
- Error requesting completion from azure openai
- Firebase and Node.js application results in the requested URL was not found on this server for the firebase serve command
- Cloud Function whit Authentication IAM ERROR 401 (Flutter/Firebase)
- Strange behaviour when using React Native Expo Linking Library. Server URL is not being updated
- Firebase functions download file from storage
- Populating a PDFKit Image from Firebase Storage while in a Firebase Function?
- Manually trigger scheduled or trigger function