I have very simple write security rule that should only allow users with verified email to write data,
"someNode": {
".write": "auth.token.emailVerified === true"
}
For some reason I am still getting permission denied in simulator with specific users token and in my app with same user. I double checked user object in client and it indeed has emailVerified === true
hence I am not sure to why this is not working.
Screenshot:
Turns out auth.token.emailVerified
should be auth.token.email_verified
its a bit inconsistent with how such data is presented on client side.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With