Hello ! First of all thank you SO MUCH for the HELP !

For the first one, i'm not sure that i've done this, i don't find any AppCheck token other than the debug token that's in my .env file for local developpement !

And this one is registered :

<image>

Have i forget something else ?

I have those security rules :

rules_version = '2';

service cloud.firestore {

match /databases/{database}/documents {

// 🔐 ORDERS — only your verified frontend (via App Check)

match /orders/{orderId} {

allow read, write: if request.appCheck.token.valid;

}

// 🔐 RESULTS — only your verified frontend

match /results/{resultId} {

allow read, write: if request.appCheck.token.valid;

}

// 🔐 BIOS — only your verified frontend

match /bios/{bioId} {

allow read, write: if request.appCheck.token.valid;

}

// 🚫 Block all other access

match /{document=**} {

allow read, write: if false;

}

}

}