The existing IAP authentication session (cookies like __Host-GCP_IAP_AUTH_TOKEN_*) is not automatically linked to the Firebase client auth state, so onAuthStateChanged does not yield a user without re-establishing a credential/session in Firebase Auth.

c5f6bd03-2312-4b70-8869-5e1f97aa4b10