New Firebase - Email Verification Feature

[George S.]

Hello!

After several changes on Firebase and the incorporation of Google Identity Toolkit it is for sure a lot more attractive to use with new apps, 

one question that it is still unclear (although mentioned) is regarding email verification , can anyone provide more info on how email verification can be used with Firebase? 

I found this page which mentions about verification codes (https://firebase.google.com/docs/reference/js/firebase.auth.Auth#properties)

but it is still unclear to me...

Thanks!

[Alfonso Gomez Jordana Manas]

Hi George! Alfonso from the Firebase auth team here. 

Please note: email verification is currently available on web and iOS.

It seems like you are using the web SDK. In this case, follow these steps to verify your users emails:

1) Call User#sendEmailVerification() to trigger an email verification flow. This will send an email to your user, with a link they can click on to complete the verification process
2) Check if an email has been verified by looking at User#emailVerified

You can customize some parameters of the emails we send to verify your users, as well as the link to which we send them to complete the verification process. In order to learn more about this, check this help article.

If you try this feature out, we would appreciate if you could send us your feedback so we can improve it and document it better :)

Thank you

[George S.]

Hi Alfonso ,

Thanks for the quick reply! Looks ok for the web client, regarding your note, what about Android apps? Is this feature supported for Android yet?

[Alfonso Gomez Jordana Manas]

Currently you can only check if a user is verified, but not trigger a verification flow, from within the android SDK.

[Matthew Huebert]

Is .emailVerified included in the .auth variable in security rules? The documentation isn't very specific. 

from https://firebase.google.com/docs/database/security/user-security#section-integrate-auth

Once a user authenticates, the auth variable in your Firebase Database Rules rules will be populated with the user's information. This information includes their unique identifier (uid) as well as linked account data, such as a Facebook id or an email address, and other info.

and then

The predefined auth variable in the rules is null before authentication takes place. Once a user is authenticated with Firebase Authentication, it will contain the following attributes:

provider	The authentication method used ("password", "anonymous", "facebook", "github", "google", or "twitter").
uid	A unique user id, guaranteed to be unique across all providers.

[hwiz...@gmail.com]

Hi Alfonso, could you please provide more information regarding email verification for Android? From my point of view it is a feature long awaited by the Firebase community and the lack of information to implement it in Android is dissapointing.

Thanks!

[man...@moderntechnolab.com]

Hi alphonso ,

It would be good if we can specify in documentation that email verification is not supported for android because i almost wasted half of my day figuring this out.

I think firebase console would be good place to show the user (in email template) that this feature is not supported for android.

Can you please tell what are your plans on adding this feature in android.

As if i have to implement the whole verification for only android that would be very disappointing.

[Kato Richardson]

Hi Gents, great to meet you! Please be sure to introduce yourselves on the list. We're all part of the same community here, so let's all be friendly and courteous humans with names.

It's unfortunate that Android email verification didn't make it into the I/O release. We really wanted to get this in, but couldn't for some technical reasons. It's definitely a high priority! No ballparks or public release dates I can share. Sorry. But we will get it out as soon as practical.

As for mentioning this in the docs, I couldn't agree more. If you have a particular page in mind, be sure to click the "send feedback" button and send that it so we can straighten it up.

☼, Kato

--
You received this message because you are subscribed to the Google Groups "Firebase Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firebase-tal...@googlegroups.com.
To post to this group, send email to fireba...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/deaa9ecb-6947-4b90-8e5a-99404c77275a%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

--

Kato Richardson |

Developer Programs Eng |

kato...@google.com |

775-235-8398

[Jacob Wenger]

@Matthew - Regarding telling if a user is verified in the Security rules, you should be able to use auth.token.email_verified in your rules:

".read": "auth.token.email_verified === true"

We realize we need to get this kind of information into the documentation. It's coming.

Cheers,

Jacob

To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/CADypTEaaYDgSu4fooW8OLkEgr%2Bs0sUSjq6G-CS-HHDUj5jqD%2Bg%40mail.gmail.com.

[Dotun Opasina]

Hi Alfonso -

Dotun here. I am trying to use the email verification feature!

I was able to send an email for verification to the user but after clicking the verification link, the User#emailVerified status does not change and stays at false.

Not sure if there is anyway I can check the status of the verified email through the console to make sure I am not doing anything wrong on my end.

Thanks and great work with the update!

[ayushi mundra]

Hi , if any one have idea for email verfication using firebase please inform us .

how we can use sendEmailVerification() function for firebase.

[ayushi mundra]

Is there any possibility for sms /phone verification for android app??

On Sat, Sep 3, 2016 at 7:45 PM, ayushi mundra <ayushim...@gmail.com> wrote:

Hi , if any one have idea for email verfication using firebase please inform us .

how we can use sendEmailVerification() function for firebase.

--
You received this message because you are subscribed to a topic in the Google Groups "Firebase Google Group" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/firebase-talk/u7iipFhXVxg/unsubscribe.
To unsubscribe from this group and all its topics, send an email to firebase-talk+unsubscribe@googlegroups.com.

To post to this group, send email to fireba...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/1954eb61-47ce-481d-af68-9538776bbb4b%40googlegroups.com.

[Alan deLespinasse]

In the Web client library, user.emailVerified stays false until the user logs out and back in again, or you call user.reload(). I think this is considered a bug that they're planning to fix (I exchanged some messages with Firebase support about it).

[Bassam]

Yeah it was a bug in 3.3.0 (user.emailVerified not updating on page reload) and should be fixed in the upcoming release.

[ayushi mundra]

when you update firebase authentication related to email verification for android app design.

--

You received this message because you are subscribed to a topic in the Google Groups "Firebase Google Group" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/firebase-talk/u7iipFhXVxg/unsubscribe.
To unsubscribe from this group and all its topics, send an email to firebase-talk+unsubscribe@googlegroups.com.
To post to this group, send email to fireba...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/9ffbd03d-4f30-44e7-9e81-7543aee30fd2%40googlegroups.com.

[Jemmy Witana]

hey im newbie at firebase

can anyone give me some reference for send email verification from admin sdk in java?
and how to check is that user already verified or not in java? 

[Bassam]

Hey Jemmy, that functionality is not available in the Admin SDK. Typically developers use the node.js client library to do so from a server environment.

As the client library cannot run from a Java environment, you can build your own solution using the Firebase Auth REST API:  https://firebase.google.com/docs/reference/rest/auth/

Bassam