Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How long is Firebase's passwordless auth link valid for?

I'm following the steps found here: https://firebase.google.com/docs/auth/web/email-link-auth#enable_email_link_sign_in_for_your_firebase_project

When a user enters their email and is sent a link to sign in to my app, they receive a sign-in link. After that link is used once, it can't be used again. Is there a timeout for how long that link is valid?

like image 430
imjared Avatar asked Jul 30 '18 17:07

imjared


People also ask

How does Firebase email verification work?

You can use Firebase Authentication to sign in a user by sending them an email containing a link, which they can click to sign in. In the process, the user's email address is also verified. There are numerous benefits to signing in by email: Low friction sign-up and sign-in.

How do I know if my Firebase email is verified?

Check verification status initializeApp(config); firebase. auth(). onAuthStateChanged( function(user) { if(user){ var emailVerified = user. emailVerified; var email = user.

How can I get my Firebase authentication password?

If you haven't yet connected your app to your Firebase project, do so from the Firebase console. Enable Email/Password sign-in: In the Firebase console, open the Auth section. On the Sign in method tab, enable the Email/password sign-in method and click Save.

Can you create a user with the same credentials in Firebase?

You can allow users to sign in to your app using multiple authentication providers by linking auth provider credentials to an existing user account. Users are identifiable by the same Firebase user ID regardless of the authentication provider they used to sign in.


1 Answers

Today official Firebase support answered me a question about the validity of the link. I also asked when I create more links in a row so if all of them will be valid or only the last one. Finally, I asked them to add it to documentation as I could not find it anywhere.

Here is the answer:

Email link Authentication has a longer expiration time (around 6 hours). If you'll create 2 or more sign in emails in a row, you should be able to login with the latest link being received. You'll also be able to receive an error message for example in iOS, "The action code is invalid. This can happen if the code is malformed, expired, or has already been used" when you clicked the older links.
like image 178
douda Avatar answered Nov 15 '22 11:11

douda