user.emailVerified doesn't change after clicking email verification link firebase

Question

After learning sending email verification is possible in latest firebase, although the docs are missing that, I wanted to test it for myself.

Using the snippet below:

  Auth.$onAuthStateChanged(function(firebaseUser) {
    if (firebaseUser) {
      console.log(firebaseUser);
      if (firebaseUser.emailVerified) {
        // console.log(firebaseUser.emailVerified); 
        toastr.success('Email verified');
      } else {
        toastr.info('Do verify email');
      }
    }
  })

The console.log(firebaseUser.emailVerified) returns false, always, although a send verification was initiated, email received, and clicked on.

Right after login with email, I check to see if user is verified, if not, email should be sent:

Auth.$signInWithEmailAndPassword(email, password)
  .then(function(firebaseUser) {
    if (!firebaseUser.emailVerified) {
      firebaseUser.sendEmailVerification();
      console.log('Email verification sent');
    }
    $state.go('home');
  })

Under my https://console.firebase.google.com/project/my-app-name/authentication/emails, everything is by default, with a verify link as:

Follow this link to verify your email address. https://my-app-name.firebaseapp.com/__/auth/handler?mode=<action>&oobCode=<code>

The email I use to sign up receives the verify email message, yet, clicking the link does nothing to change the user.emailVerified to true.

Are the steps outline here all there is, or there's yet another step not found in the docs?

try running the reload method on the current user. firebaseUser.reload() that should refresh the emailVerified var. — Tope
– Tope, Commented Feb 27, 2017 at 23:15

Wai Ha Lee · Accepted Answer · 2021-06-01 08:15:49Z

17

As mentioned by Tope in a comment, you need to do a firebaseUser.reload() in order for the change to the firebaseUser's authentication status to be updated.

edited Jun 1, 2021 at 8:15

Wai Ha Lee

8,856102 gold badges61 silver badges100 bronze badges

answered Feb 28, 2017 at 8:47

Sivart

1912 silver badges8 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Nihad Delic Over a year ago

Yes, but when you will reload? How do you know that the user has visited the link in an email?

myworldbox Over a year ago

Maybe add a time expiration after 15 minutes?

Frank van Puffelen · Accepted Answer · 2024-01-03 14:23:52Z

9

I just took the same steps:

auth.currentUser.emailVerified

false

auth.currentUser.sendEmailVerification()

wait for the email
click the link in the email
sign out
sign in again

And then

auth.currentUser.emailVerified

true

Note step 3 and 4: I needed to sign in again, before the new value of emailVerified was visible in my app. Instead of signing out and back in again, you can also reload the user profile, which forces it to refresh the data from the server.

This answer also seems relevant, but I only spotted it after writing the above: Firebase confirmation email not being sent

edited Jan 3, 2024 at 14:23

answered Jun 18, 2016 at 22:09

Frank van Puffelen

603k85 gold badges895 silver badges868 bronze badges

2 Comments

KhoPhi Over a year ago

On that note, then I don't need to do what is said here, as in applying the code? firebase.google.com/docs/reference/js/…

KhoPhi Over a year ago

The thread from here: groups.google.com/d/msg/firebase-talk/EGYwg2vjRq4/0KXEhucLAQAJ touches on the use of the applyActionCode, however, what I'm wondering if that is still needed or the verification now happens automatically

KhoPhi · Accepted Answer · 2016-07-22 17:28:36Z

In a very minimalistic way, this is what I ended up with:

angular.module('theApp')

.controller('emailVerifyController', ['$scope', '$stateParams', 'currentAuth', 'DatabaseRef',
  function($scope, $stateParams, currentAuth, DatabaseRef) {
    // where currentAuth and DatabaseRef is what they sound like
    $scope.doVerify = function() {
      firebase.auth()
        .applyActionCode($stateParams.oobCode)
        .then(function(data) {

          // change emailVerified for logged in User
          // you can update a DatabaseRef endpoint in here
          // whatever!

          toastr.success('Verification happened', 'Success!');
        })
        .catch(function(error) {
          $scope.error = error.message;
          toastr.error(error.message, error.reason, { timeOut: 0 });
        })
    };
  }
])

Then in template, something like this:

<a ng-click="doVerify()" class="button large">Verify my Account</a>

Although the applyActionCode is not yet wrapped for AngularFire, you could still drop down to vanilla Javascript of the SDK in your AngularJS stuff, besides, why not!

I share more details for Email Verification in Firebase:
https://blog.khophi.co/email-verification-firebase-3-0-sdk/

Leo Farmer · Accepted Answer · 2019-09-05 23:39:06Z

2

We have just gone through the same issue and found the fix was to both reload user using user.reload() function and to also change the observer from onAuthStateChanged to onIdTokenChanged.

This is because you are updating the firebase token with the new emailVerifed property and onIdTokenChanged is listening for changes to the Id token and updates the user object with the correct values.

Code snippets:

export function* register_user(action) {
  try {
    //Call api which registers user and sets email verified to true
    let register_result = yield call(Register_API.create_registration, action.data)

    if (register_result && register_result.status >= 200 && register_result.status < 300) {
      let user = firebase.auth().currentUser
      //Force user to reload so we can trigger the onIdTokenChanged listener
      return user.reload()
    }

  } catch (e) {
    console.error(e)
  }
}


firebase.auth().onIdTokenChanged(function (user) {
      if (user && user.uid) {
        if (user.emailVerified) {
         //Stuff you want to do
        }
      }
    })

edited Sep 5, 2019 at 23:39

answered Aug 9, 2019 at 0:53

Leo Farmer

7,9606 gold badges35 silver badges48 bronze badges

3 Comments

Mohammedsalim Shivani Over a year ago

It would be helpful if you share your code snippet or some sample code for others to refer.

Madura Pradeep Over a year ago

worked with both await auth().currentUser.reload(); await auth().currentUser.getIdToken(true)

Harry Scheuerle Over a year ago

current user reload didn't work for me but the get token refresh did. Might be api version though since we're kinda out of date unfortunately

John Doe · Accepted Answer · 2020-09-07 10:58:07Z

2

In my case, it seems currentUser.emailVerified switches to true, but not always. Not sure why. It switches to true with Chrome in most cases, but not always. It does not with Firefox.

Applying the reload() method seemed to fix the issue.

I have the following in a saga, after loading the URL that contains the oobCode :

const currentUser = firebase.auth().currentUser;
if(currentUser){
  currentUser.reload();
}

answered Sep 7, 2020 at 10:58

John Doe

1,1823 gold badges14 silver badges30 bronze badges

Comments

Bhupiister singh · Accepted Answer · 2020-04-27 22:05:17Z

0

We just need to reload the user's state after the user has clicked the user confirmation link. Especially if someone is using the firebase UI sign-in flow, one may have noticed that user Sign-up and Sign-in executes simultaneously. For such a case, the user needs to be reauthenticated by Sign-Out Sign-In, which is not a pleasant experience. However, Firebase provides an option to reload the user. Putting it inside the async-await function will make sure that the state is refreshed before executing the next commands.

async function confirmEmailVerified(){
    await auth.currentUser.reload();
    var isEmailVerified = auth.currentUser.emailVerified;
    if (isEmailVerified) {
        console.log("Email verified");

    }else{
        console.log("Email not verified, please verify or click on resend to get the verification email!");
    } 
}

answered Apr 27, 2020 at 22:05

Bhupiister singh

1191 silver badge6 bronze badges

4 Comments

carinlynchin Over a year ago

I actually tried this and it still shows as false for email verified.

Bhupiister singh Over a year ago

@carinlynchin If you are still looking for solution, please let me know, maybe I can look into your code and help you.

carinlynchin Over a year ago

i ended up not using it... i was trying to use the action url... so I just took that out and the verify worked... it was for reactnative version

Hernán Garcia Over a year ago

Two years later I found the same issue and I was able to solve it, I leave it here in case it can be useful to someone

Collectives™ on Stack Overflow

user.emailVerified doesn't change after clicking email verification link firebase

6 Answers 6

2 Comments

2 Comments

Comments

3 Comments

Comments

4 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

6 Answers 6

2 Comments

2 Comments

Comments

3 Comments

Comments

4 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related