Code Obfuscation for a flutter project sending debug to firebase

[RowinaSeidler]

If you are looking for help, please confirm the following...

• I confirm I have searched the Docs, Codemagic Sample Projects, and GitHub Discussions.
• I confirm the software versions on my local computer match the ones in CI environment (e.g. Xcode version, Gradle version). See here
• I confirm I am able to do a fresh clone of the repository and build the project on my local computer.

Which mobile framework are you using?

Flutter (Dart)

Steps to reproduce

I created a forum discussion about this in April, but didn’t see the answer till now and realized the answer was not complete. The answer explained the code needed to obfuscate a flutter app using code magic. The answer also explained how to upload the dsym symbols to firebase. However, what I also need to do is upload the debug symbols that are produced from the obfuscation to firebase. I believe these are different debug symbols to the dsym ones. Many thanks, Rowina

Expected results

I will be able to use code magic to obfuscate my flutter app and upload the dsym symbols and the symbols produced from the obfuscation to firebase for obtain accurate crash reports.

Actual results

The postscript I have written to try and do this is not working.

Build id (optional)

69288ddc84e10b78b9716b9c

[dam-ease]

Hello @RowinaSeidler,
I went through your build logs, and I see some errors related to branding and your credentials.

ERROR [27-11-2025 18:06:17] [builder.py:380] 67fac9b5beec89492d0c69ad (67fac9b5beec89492d0c69ac) Project branding with Artifact(path=PosixPath('/Users/builder/clone/build/ios/ipa/noteology.ipa'), type=<ArtifactType.IPA: 'ipa'>, name='noteology.ipa') failed.

google.auth.exceptions.DefaultCredentialsError: Your default credentials were not found. To set up Application Default Credentials, see https://cloud.google.com/docs/authentication/external/set-up-adc for more information.

Can you please double check the configuration details you are currently using?
Also, try using the below script in the post-publish phase instead:

Post Publish

#!/bin/bash
set -e

echo "Installing Firebase CLI..."
npm install -g firebase-tools --silent

echo "Firebase CLI Installation Done"

# Firebase CI token must be set in Codemagic env vars
export FIREBASE_TOKEN="$FIREBASE_TOKEN"

# Codemagic build dir
BUILD_DIR="${CM_BUILD_DIR:-$FCI_BUILD_DIR}"
SYMBOLS_PATH="$BUILD_DIR/build/app/symbols"

# Your Firebase App IDs
ANDROID_APP_ID="<Your_Android_App_ID"
IOS_APP_ID="<Your_iOS_App_ID>"

echo "Using symbols path: $SYMBOLS_PATH"

if [ -d "$SYMBOLS_PATH" ]; then
  echo "Uploading Flutter obfuscation symbols for ANDROID..."
  firebase crashlytics:symbols:upload \
    --app="$ANDROID_APP_ID" \
    "$SYMBOLS_PATH"

  echo "Uploading Flutter obfuscation symbols for iOS..."
  firebase crashlytics:symbols:upload \
    --app="$IOS_APP_ID" \
    "$SYMBOLS_PATH"

  echo "Flutter obfuscation symbols uploaded for Android and iOS"
else
  echo "Symbol directory not found: $SYMBOLS_PATH"
  echo "Did you build with: --obfuscate --split-debug-info=build/app/symbols ?"
fi

[RowinaSeidler]

Hi Dam-Ease, Thanks so much for your swift reply! I went into https://console.cloud.google.com/iam-admin/iam and created a service account for codemagic with the following roles: Firebase Admin, Firebase App Distribution Admin, Firebase Crashlytics admin and Service Account Token creator. I then added an environment variable in codemagic with the json file produced from the key in the service account. I created a pre-build script which seemed to run fine: #!/bin/bash

echo "🔧 Setting up Google Cloud Application Default Credentials..."

if [ -n "$GOOGLE_SERVICE_ACCOUNT_JSON" ]; then
echo "✔ Found GOOGLE_SERVICE_ACCOUNT_JSON"

echo "$GOOGLE_SERVICE_ACCOUNT_JSON" > $CM_BUILD_DIR/google-credentials.json

export GOOGLE_APPLICATION_CREDENTIALS="$CM_BUILD_DIR/google-credentials.json"

echo "✔ GOOGLE_APPLICATION_CREDENTIALS set to: $GOOGLE_APPLICATION_CREDENTIALS"

elif [ -n "$GOOGLE_APPLICATION_CREDENTIALS" ]; then
echo "✔ GOOGLE_APPLICATION_CREDENTIALS already set: $GOOGLE_APPLICATION_CREDENTIALS"

else
echo "❌ WARNING: No Google Cloud credentials found!"
echo "Make sure GOOGLE_SERVICE_ACCOUNT_JSON is added as a Secret variable in Codemagic."
exit 1
fi

dart pub global activate flutterfire_cli
export PATH="$PATH":"$HOME/.pub-cache/bin"

And I put in the code you gave me with the updated android and iOS app id into the post-publish script. It failed again with the same exit code as before:

Installing Firebase CLI...
Build failed :|
Step 9 script Post-publish script exited with status code 1

Also, I could not see the error you can see in my build logs. Do you have more verbose build logs? By the way ChatGPT does not think I need that post-publish script and that my debug symbols from obfuscation will automatically be uploaded once the credentials are set up? However it was chat-gpt that originally said I needed that post-publish script! Please help me get this all working!! Many thanks!

[dam-ease]

Hello @RowinaSeidler,

Quick clarification here though:
dSYMs and native symbols are handled by Crashlytics automatically, but the Flutter obfuscation symbols from --split-debug-info=build/app/symbols are NOT uploaded automatically. Those still need the firebase crashlytics:symbols:upload command.

The current failure seems to happen because the post-publish step is exiting at:

npm install -g firebase-tools

In the post-publish environment, npm can fail, and because set -e is enabled, the script exits immediately.

Let's try below to see if it helps here:

• Move npm install -g firebase-tools to a pre-build script
• Use a FIREBASE_TOKEN (from firebase login:ci)
• Keep the post-publish script only for the symbol upload

This should resolve the credentials + npm issues you’re hitting now.

[dam-ease]

Hello @RowinaSeidler,
Did you get a chance to check my last message?
How did it go?
Just checking in.