firebase / firebase/functions-samples

[BUG] in sample: Spotify Auth

Open
#1,154 0 comments 0 reactions 0 assignees View on GitHub
type: bug
Dominant language
JavaScript
Stars
12.2k
Forks
3.8k
Avg merge
3d 23h
Merged PRs (30d)
1

Description

### Which sample has a bug?
Spotify Auth
https://github.com/firebase/functions-samples/blob/main/Node-1st-gen/spotify-auth/functions/index.js

### How to reproduce the issue

N/A

### Debug output

N/A

### Expected behavior
customToken.emailVerified should be unset or set to false upon creation.

The [Spotify API documentation](https://developer.spotify.com/documentation/web-api/reference/get-current-users-profile) states that emails are not verified by Spotify. Incorrectly setting emailVerified to true can create security vulnerabilities.

### Actual behavior

customToken.emailVerified is set to true upon creation

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.