refactor(tests): generate firebase credentials on-the-fly instead of committing

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: AchoArnold

.github/workflows/integration-test.yml

@@ -23,8 +23,9 @@ jobs:
         with:
           go-version: "1.22"
 
-      - name: Load Firebase credentials
+      - name: Generate Firebase credentials
         run: |
+          bash tests/generate-firebase-credentials.sh tests/firebase-credentials.json
           echo "FIREBASE_CREDENTIALS=$(jq -c . tests/firebase-credentials.json)" >> $GITHUB_ENV
 
       - name: Start services 🐳

.gitignore

@@ -6,3 +6,5 @@
 android/app/debug/
 *main.exe*
 android/app/release/
+
+tests/firebase-credentials.json

tests/firebase-credentials.json

@@ -0,0 +1,31 @@
+#!/bin/bash
+# Generates a fake Firebase service account JSON for integration tests.
+# The RSA key is throwaway — it only needs to be valid so the Firebase SDK can sign JWTs.
+# The emulator does not validate these tokens.
+
+set -e
+
+OUTFILE="${1:-firebase-credentials.json}"
+
+# Generate a 2048-bit RSA key
+PRIVATE_KEY=$(openssl genrsa 2048 2>/dev/null)
+
+# Escape newlines for JSON embedding
+PRIVATE_KEY_ESCAPED=$(echo "$PRIVATE_KEY" | awk '{printf "%s\\n", $0}')
+
+cat > "$OUTFILE" <<EOF
+{
+  "type": "service_account",
+  "project_id": "httpsms-test",
+  "private_key_id": "test-key-id",
+  "private_key": "${PRIVATE_KEY_ESCAPED}",
+  "client_email": "test@httpsms-test.iam.gserviceaccount.com",
+  "client_id": "123456789",
+  "auth_uri": "http://emulator:9090/auth",
+  "token_uri": "http://emulator:9090/token",
+  "auth_provider_x509_cert_url": "http://emulator:9090/certs",
+  "client_x509_cert_url": "http://emulator:9090/certs/test"
+}
+EOF
+
+echo "Generated $OUTFILE"