onCall Dart functions deploys with public access disabled

[jhuleatt]

[REQUIRED] Environment info

firebase-tools: 15.12.0

Platform: macOS

[REQUIRED] Test case

firebase.https.onCall(
      name: 'onCallDemo',
      options: const CallableOptions(
        cors: Cors(['*']),
        maxInstances: Instances(1),
      ),
      (request, response) async {
        print('I was called!');
        final data = request.data as Map<String, dynamic>?;
        final name = data?['name'] ?? 'World';
        return CallableResult({'message': 'Hello, $name!'});
      },
    );

[REQUIRED] Steps to reproduce

Deploy a callable Dart function, then check the "Security" tab in the Cloud Run console. In the "Authentication" card, "Require authentication" is selected.

[REQUIRED] Expected behavior

Public access is allowed by default

[REQUIRED] Actual behavior

"Require authentication" is selected

[cabljac]

Hi! thanks for opening this, it's been received. We'll provide updates on this when we have them.

[ajperel]

Confirmed that public is the default for callable Node & Python. You can see that in places like:

• firebase-tools/src/deploy/functions/release/fabricator.ts

  Line 316 in e28281f

  } else if (backend.isCallableTriggered(endpoint)) {

• firebase-tools/src/deploy/functions/release/fabricator.ts

  Line 478 in e28281f

  } else if (backend.isCallableTriggered(endpoint)) {

and elsewhere for non-callable HTTPS functions. We should make Dart consistent.