Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fetchSignInMethodsForEmail: UniversalEmailSignIn and co deprecation #148

Closed
lesnitsky opened this issue Oct 17, 2023 Discussed in #147 · 0 comments · Fixed by #153
Closed

fetchSignInMethodsForEmail: UniversalEmailSignIn and co deprecation #148

lesnitsky opened this issue Oct 17, 2023 Discussed in #147 · 0 comments · Fixed by #153
Labels
auth infrastructure improvements to codebase

Comments

@lesnitsky
Copy link
Member

On September 15, 2023 email enumeration protection was enabled by default for all new Firebase projects created after that date to boost security. When this setting is enabled, it limits the ability to check for what existing sign in methods exist for an email address through the fetchSignInMethodsForEmail.

If you do need access to fetchSignInMethodsForEmail, the only workaround is to disable email enumeration protection on your Firebase project's underlying Cloud project. Disabling email enumeration protection will lower the security of your project.

We will be deprecating:

  • UniversalEmailSignInScreen
  • UniversalEmailSignInProvider
  • UniversalEmailSignInController
  • DifferentSignInMethodsFound auth state
  • AuthProvider#findProvidersForEmail
  • AuthListener#onBeforeProvidersForEmailFetch
  • AuthListener#onDifferentProvidersFound
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auth infrastructure improvements to codebase
Projects
None yet
2 participants