authentication - Firebase email verification flow broken? -


firebase email/password account creation , email verification seems broken. appears automatically logged in after creating new account (on android @ least) , seems have login in order call user.sendemailverification(). after user clicks link in email web page says

you can log in account

that's neat - user already logged in. possible create new email/password account without automatically logging in , request email verification without first logging unverified account?

it's possible use cloud function create account currently, solving first problem - not seem possible request email verification way.

a user's email address not have verified user sign in. in fact, need know credentials: email address + password email/password authentication, whatever credentials social provider (facebook, twitter, github, google) requires, or event phone number on receive verification text message.

if want limit user without verified email address can do, should check in token of user whether have verified email address. example, limit access database users verified email address:

".read": "auth.token.email_verified === true" 

for cloud storage syntax different, logic same. if have other back-end service want integrate firebase authentication, can decode token , check if email_verified true.

if there bug, in message of email seems hint can log in - if couldn't log in before. correct message should user may have reauthenticate in order app know they've verified email address (the token in app doesn't pick fact up, since it's so-called out-of-bounds verification).


Comments

Popular posts from this blog

ubuntu - PHP script to find files of certain extensions in a directory, returns populated array when run in browser, but empty array when run from terminal -

php - How can i create a user dashboard -

javascript - How to detect toggling of the fullscreen-toolbar in jQuery Mobile? -