🚨 Looking for help from a Software Engineer experienced with Firebase Authentication / reCAPTCHA Enterprise

I’m currently working on a web application using Next.js + Firebase Authentication, and I’m stuck with a persistent issue in Phone Number Authentication on the production website.

The error occurs when Firebase tries to send the SMS verification code:

accounts:sendVerificationCode

HTTP 400

reCAPTCHA Enterprise verification failed

The browser/application has also previously shown:

reCAPTCHA has already been rendered in this element

I have already verified that:

✅ Phone Authentication is enabled

✅ SMS sign-in is enabled

✅ Firebase Authentication with Identity Platform is enabled

✅ Production domain is added to Firebase Authorized Domains

✅ reCAPTCHA Enterprise API is enabled

✅ Identity Toolkit API is enabled

So I’m trying to determine whether the issue is coming from the reCAPTCHA Enterprise configuration, Firebase project configuration, production domain, or the way `RecaptchaVerifier’ is being initialized/managed in the React/Next.js application.

I’m looking for someone who has experience with Firebase Phone Auth + reCAPTCHA Enterprise who can help me diagnose the issue and identify the exact root cause.

If you have experience with this specific Firebase/reCAPTCHA issue and can help, please DM me. I’d really appreciate it! 🙏

Hi everyone!

I created this free Google Cloud Professional Data Engineer practice simulator while studying for the exam myself, and I’ve just updated it for 2026:

https://certlabs.app

It has 500+ scenario-based questions with explanations covering BigQuery, Dataflow, Bigtable, Spanner, IAM, etc.

One thing I found really useful while studying is the anti-memorization approach: every attempt shuffles both the questions and the answer choices, with the explanations dynamically matched to the new order. So you learn the concepts rather than memorizing that “B” is the answer.

All questions are original — no dumps or leaked exam questions.

It’s completely free. Hope it helps someone preparing for the exam! Good luck 🤞

I've been using GCP for about 10 yrs and just went for my ACE and passed in July. The issue is the agency I work for doesn't have enough work so I'm looking for alternatives but it's really difficult in the East coast as everyone seems to use AWS. Any insight on looking for GCP work particularly in the East Coast?!

Hellos,

I'm a newbie and thought I was slightly tech savvy until I started my Google Cloud service about 9 months ago.

I opened my GCLoud account (with a longstanding Google account), built all the folders, added all the files, added one video editor with Viewer Access then deleted them when the contract ended, then another video editor and then deleted their access. It seems like since I added the 3rd video editor something happened, I can see all the files but I have no permissions to do any edits.

I have added, besides the Account Owner role, almost every "Storage..." admin, object viewer, like 7 different roles, nothing. But I could create folders and now everything after "Objects" in the bucket view gives a red "Additional permissions required to view this buckets metadata..." Likewise I get the "The Caller does not have permission" when I try and add a folder.

Now that I recall, I never had permission to move files, as I have some specific files in the root directory of the bucket that I could never put into the proper folder, that I created.

At least I can delete files so maybe that is my option, but seems weird that permissions I had just went away.

Thanks for any help you can offer.

I accidentally deleted most of the form submission records from my MySQL database on Google Cloud SQL. Cloud SQL backups/PITR appear to be unavailable, and binary logging is off.
However, the uploaded files and metadata still exist in Google Cloud Storage, and the bucket has 7-day Soft Delete enabled.
Is there any way to recover the deleted database records/form data, possibly through Cloud Run logs, GCS, MySQL recovery, or any other method?

Okay so I booked the exam on the 15th of September, as I was in program with Google and what not and they gave me a voucher.

Now the catch, I haven’t studied anything, done some labs, had the AWS practitioner a year ago, and been working in DevOps the past 2 years, not gcp at all.

I need tips tricks quick marks just enough studying to pass, any exam questions that repeat any useful links and the probability to pass? With 1 week of studying with a very very very demanding job? Any tiny bit would help

A production guide to compaction strategies, parameter tuning, maintenance sequencing, and monitoring — covering the other approach that automates these operations, and the manual Spark path for full DIY control.

Filed the quota extension form for the youtube data api about a month ago, got the acknowledgement email and then nothing. the integration itself works fine and passed verification, but the default 10k units only covers a handful of uploads per day so i cant open the feature to users until the audit clears.

For those who went through it... how long did yours take, and did replying to the ack email actually speed anything up? Trying to figure out if a month of silence is normal or if my application fell into a hole somewhere.

I'm building an app where the AI has to run inside the EU for data protection reasons (customer data can't leave the EU). So instead of the normal US API, I want to use Anthropic's Claude models — ideally Opus — through a path that's hosted in the EU.

I've tried two routes and I'm stuck on both:

AWS Bedrock, Frankfurt region (eu-central-1): Even a tiny test request threw an immediate 429 "Too many tokens per day" — a few tokens, no image. It's not something I did wrong; it just looks like a fresh account with a very low daily quota.

Google Vertex AI (apparently now called "Agent Platform"): I got further here but hit a different wall. A normal API key works fine for Google's own Gemini models. But for the Claude/Opus models on Vertex a simple key isn't enough — Google wants a service account (OAuth2/ADC) for those. On top of that there was an enablement form asking things like industry and estimated token volume.

My suspicion is that this form is the real bottleneck. Either enablement for the Anthropic models takes longer than I expect, or I filled something in wrong (the industry field, maybe) and it's stuck because of that. Honestly, I don't know if this is normal or if I'm doing something wrong.

Has anyone here actually gotten Claude/Opus running through Vertex or Bedrock in an EU region? How long did enablement take, and was there anything to watch out for in the form? Or is there a cleaner path to EU hosting with Anthropic models that I'm missing?

Thanks for any pointers.

I interviewed for a CE role and the recruiter called saying that the team is going with another person but my file will be kept for 6 months because I qualify for the role and he will start shopping for a team looking for a similar profile after which I’ll do an informal chat with a prospective HM.

Never heard or seen something like this before. Does anyone have experience with this? What should I do?

Hi

I am looking for an API Gateway to be implemented. The gateway will be handling around 1B API calls everyday and it contains all sort of API calls including B2B and B2C.

I was looking to use APIGEE X but would like to get an understanding

Can someone share any thought and also share the rough estimate around the cost?

An automated agent may create temporary downloads, intermediate transforms, final documents, generated HTML, and metadata about where each result came from. Keeping everything on its local disk makes recovery difficult, while putting every scratch file into durable storage creates clutter and broad permissions. What boundary works well on Google Cloud? One design is ephemeral local storage for a single run, versioned Cloud Storage objects for outputs worth keeping, and Firestore or a relational table for provenance, status, retention, and access policy. Filestore seems relevant only when tools genuinely require a shared filesystem. How would you scope service-account permissions, promote an intermediate result to an approved artifact atomically, preserve links between metadata and object generations, and clean up abandoned runs without deleting referenced outputs?

I have a billing-enabled project that utilizes Gemini Grounded search through the gemini-3.5-flash-lite model. This model includes, "5,000 free search requests per month (shared across all Gemini 3.x models), then $14 per 1,000 requests."

However 4 days into September, this is what my billing looks like for those two SKUs:

I had Gemini review the billing report but it responded with outdated daily limits and other nonsense.

Is the free tier real or not? Is it rate limited? I can't find any documentation.

How to become a google professional cloud devops engineer?

Please i need help

Running the obsolete Centos 8.5. Has a public webserver and has been working perfectly for 6+ years. If it ain't broke don't fix it. I wonder how long before Google forces me to update the OS?

I avoid rebooting it as then it will grab a new public IP and I have to update all my DNS records for it's domain name.

Hi Everyone

I’m planning to sit for the new GCP Professional Agentic Architect Beta exam soon and was wondering if anyone happens to have a spare or unassigned voucher code (from a challenge, partner event, or cohort) that they won’t be using before it expires?

I know beta exams come with the built-in 40% discount, but if someone has an extra voucher to share via DM or knows of an active community challenge giving out exam passes right now it would be a huge help.

Thanks in advance!

BQ has been super slow today for me. Is this happening to anyone else?

thought moving our phone infrastructure to GCP would be straightforward. compute instances, cloud sql, storage. spent weeks just getting the networking right. firewalls, VPCs, cloud armor. and then the SIP trunking. that was a whole other nightmare. carrier didn't want to work with our setup. had to go back and forth with their engineers for like 2 weeks.

the actual telephony part we're using CloudTalk for since they handle the carrier relationships and routing. that part has been fine. but the GCP side? I underestimated how much work it would be.

I know GCP well. I've built complex systems on it. but voice is different. latency matters. jitter matters. you can't just throw compute at it. anyway we're live now it works. but I'm not sure I'd do it again. or at least I'd budget more time for the networking setup.

anyone else running voice workloads on GCP. what was your biggest unexpected challenge

Hi everyone,

I’m sharing our experience with a recent Google Cloud / Gemini API unauthorized usage incident, mainly to understand whether others have faced a similar situation.

We are a small French tech company and we also manage Google Cloud environments for some of our clients.

In June, one of our own Google Cloud projects was affected by unauthorized Gemini API usage, resulting in approximately €16,600 in charges.

Our Cloud Audit Logs show unauthorized administrative operations, including:

• enabling Gemini-related services;
• creating a service account for a Gemini API key;
• creating a new Gemini API key;
• followed by significant unauthorized Gemini API consumption.

We detected the incident when the visible consumption was around €3,737 and immediately took action to secure the environment. Despite this, the final amount reached approximately €16,600.

Google Cloud Support investigated the case, but ultimately declined the billing adjustment.

Here is where things become difficult for us to understand.

We also manage another Google Cloud account for one of our clients, and that account was affected by an incident showing essentially the same technical pattern:

Client account

• Same date
• Same Gemini API service
• Same Google identity appearing in the unauthorized operations
• Same source IP
• Same type of Gemini API/service-account creation
• Approximately CAD 27,000 in unauthorized charges
• 100% billing adjustment granted by Google

Our own account

• Same date
• Same Gemini API service
• Same Google identity appearing in the unauthorized operations
• Same source IP
• Same type of unauthorized operations
• Approximately €16,600 in unauthorized charges
• Billing adjustment denied

We fully acknowledge our share of responsibility regarding cloud security and that additional safeguards could have been implemented.

However, what we are struggling to understand is the completely different outcome for two incidents presenting the same technical pattern.

One important difference is that the client account was handled directly with Google Cloud, while our own account is billed through a Google Cloud distribution/reseller channel.

If both cases had been denied, we could understand that this was simply Google's policy for this type of incident.

But having personally managed both cases, seeing approximately CAD 27,000 adjusted at 100% in one case while €16,600 is denied in the other is extremely difficult to understand.

For a small startup, €16,600 is not a minor unexpected cloud bill. It can have a very serious impact on cash flow and business continuity.

Has anyone experienced a similar situation?

In particular, I would be interested to know whether anyone has seen different exceptional billing adjustment outcomes between direct Google Cloud accounts and accounts billed through a reseller/distribution channel.

I’m not looking to blame anyone — I’m genuinely trying to understand what could justify such a different outcome for two cases with the same technical pattern.

Thanks for any feedback or similar experiences.

Am I doing something wrong or is there a severe shortage of resources in Belgium? n1 n2 and e2 are for sure unavailable most of the time, probably other machines too. Does anyone else experience the same problem?