How can I custom authentication that only the email with certain domain can register?

[苗润坤]

I'm currently using Firebase to build my first app, but I want to limit my target user within my university. So, I'm thinking about let only the people with university email address can register my app, how can I achieve this?

[Joe White]

The simplest way is to checkthe eMail that you obtain from your user and only begin a Firebase authentication if the eMail comes from a domain that you want to allow.  

You could also look at whether you want to use Firebase realtime database, and add security rules there that check for an "allowed" domain in the eMail address.

[Jacob Wenger]

Hey there,

You cannot prevent sign ups based on email address, but you can prevent users from accessing resources like the Realtime Database and Storage via Security Rules (docs here and here). Your rule would look like this to limit read and write access to only @gmail.com email addresses:

{

  "rules": {

    ".read": "auth.token.email.endsWith('@gmail.com')",

    ".write": "auth.token.email.endsWith('@gmail.com')"

  }

}

Hope that helps,

Jacob

This message (and any associated files) may contain VelociKey confidential and/or privileged information. If you are not the intended recipient or authorized to receive this for the intended recipient, you must not use, copy, disclose or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by sending a reply e-mail and delete this message. Thank you for your cooperation.

--
You received this message because you are subscribed to the Google Groups "Firebase Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firebase-tal...@googlegroups.com.
To post to this group, send email to fireba...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/011d6ab2-01a2-43a3-b9a2-eec38a1363a4%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Luke Freeman]

Any chance / place I can file this as a feature request?

[Jacob Wenger]

I've forward this request on to the auth team. You can and should use Security Rules to achieve this behavior for the existing SDKs.

Cheers,

Jacob

To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/23f0a9bb-1d52-4f0a-8a3f-855a14d58956%40googlegroups.com.