0

I would like to do password resets exclusively through firebase functions so I can impose stricter rules (as there is no way to change the rules through firebase auth API) and run other logic

I can update user passwords ok through functions, but clients can always call the firebase api to send a password reset email or update their password directly. Is there a way to disable these, like how you can disable client-side account creation & deletion?

2 Answers 2

1

There is currently no way in the Firebase Authentication of Cloud Identity APIs/console to disable client-side password reset, while leaving the other email/password functionality enabled. It's a reasonable feature request, so I'd recommend filing it with the support team or on firebase.uservoice.com.

For now, the only option to have email/password sign-in but not have client-side password reset functionality would be to implement your own provider.

-1
SignInScreen(
            showPasswordVisibilityToggle: true,
            showAuthActionSwitch: false,
            actions: [ForgotPasswordAction((context, email) {})],
            providers: [EmailAuthProvider()]));
1
  • Thank you for contributing to the Stack Overflow community. This may be a correct answer, but it’d be really useful to provide additional explanation of your code so developers can understand your reasoning. This is especially useful for new developers who aren’t as familiar with the syntax or struggling to understand the concepts. Would you kindly edit your answer to include additional details for the benefit of the community? Commented Jul 31 at 0:14

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.