firebase / firebase/firebase-js-sdk
FR - Remember this device on multi factor auth
- Dominant language
- TypeScript
- Stars
- 5.1k
- Forks
- 1k
- Avg merge
- 2d 21h
- Merged PRs (30d)
- 37
Description
### Describe your environment
* Operating System version: Windows 10
* Browser version: Chrome 110
* Firebase SDK version: 8.1.0 / 9.15.0 (different projects)
* Firebase Product: auth
### Describe the problem
#### Steps to reproduce:
Our apps use Persistence.SESSION level persistence.
When enrolled with multi-factor auth, firebase will return an auth/multi-factor-auth-required error after login to trigger the multi-factor flow. As far as I can see from the docs it will *always* do this, requiring users to enter an SMS code every time they log in. This could get annoying for the users, as well as becoming quite expensive if you have lots of users.
It would be great if when calling resolveSignIn there was an option to remember a device for a specified period of time (or always) so that firebase does not continue to return the auth/multi-factor-auth-required error.
Are there any plans for this feature?
Contributor guide
Assessment
This issue has not been assessed yet.