firebase / firebase/firebase-js-sdk

FR - Remember this device on multi factor auth

Open
#7,040 6 comments 5 reactions 0 assignees View on GitHub
api: auth feature request
Dominant language
TypeScript
Stars
5.1k
Forks
1k
Avg merge
2d 21h
Merged PRs (30d)
37

Description

### Describe your environment

* Operating System version: Windows 10
* Browser version: Chrome 110
* Firebase SDK version: 8.1.0 / 9.15.0 (different projects)
* Firebase Product: auth

### Describe the problem

#### Steps to reproduce:
Our apps use Persistence.SESSION level persistence.

When enrolled with multi-factor auth, firebase will return an auth/multi-factor-auth-required error after login to trigger the multi-factor flow. As far as I can see from the docs it will *always* do this, requiring users to enter an SMS code every time they log in. This could get annoying for the users, as well as becoming quite expensive if you have lots of users.

It would be great if when calling resolveSignIn there was an option to remember a device for a specified period of time (or always) so that firebase does not continue to return the auth/multi-factor-auth-required error.

Are there any plans for this feature?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.