Firebase still retrieving authData after deletion

后端 未结 1 1059
梦谈多话
梦谈多话 2020-11-27 06:12

After I manually deleted the account connected to the uid that my iphone simulator is on (from firebase dashboard), when I run the code below it\'s somehow still authenticat

相关标签:
1条回答
  • 2020-11-27 06:33

    Deleting an account does not automatically expire the current session(s) for that account. Their current sessions will remain valid until they expire. You can set the session expiration interval in your Firebase Dashboard.

    If you want to force the user to be logged out, call ref.unauth().

    But in general you'll likely want to build authorization rules to prevent such users with valid tokens from deleted accounts to make changes to the data.

    If you keep the user profiles in your database, you can check whether that record still exists in your security rules: root.child('users').child(auth.uid).exists().

    Also see:

    • Firebase authentication not revoked when user deleted?
    • Deletion of User in firebase does not trigger onAuth method
    0 讨论(0)
提交回复
热议问题