verifyIDToken doesn't check disabled status

firebase / firebase-admin-go

Firebase Admin Go SDK

Apache License 2.0

1.13k stars 242 forks source link

Closed Galadros closed 3 years ago

Galadros commented 3 years ago

The verifyIDToken function checks to see whether the ID token is revoked, but never actually checks to see whether or not it's disabled.

hiranya911 commented 3 years ago

Fixed in #455