🐛 [firebase_core] Auth persisted across app uninstall

tzvc commented 3 years ago

Bug report

Auth state is persisted across app uninstall since SDK was update to latest versions

Steps to reproduce

Steps to reproduce the behavior:

Sign in using firebase_auth (I'm using phone auth)
Uninstall the app and reinstall it
On open, the user is still logged in

Expected behavior

After uninstall, the auth state should be cleared

Flutter doctor

Run flutter doctor and paste the output below:

Click To Expand

``` Doctor summary (to see all details, run flutter doctor -v): [✓] Flutter (Channel stable, 2.2.3, on macOS 11.3.1 20E241 darwin-x64, locale en-FR) [!] Android toolchain - develop for Android devices (Android SDK version 30.0.3) ! Some Android licenses not accepted. To resolve this, run: flutter doctor --android-licenses [!] Xcode - develop for iOS and macOS ✗ Xcode installation is incomplete; a full installation is necessary for iOS development. Download at: https://developer.apple.com/xcode/download/ Or install Xcode via the App Store. Once installed, run: sudo xcode-select --switch /Applications/Xcode.app/Contents/Developer sudo xcodebuild -runFirstLaunch ! CocoaPods 1.9.1 out of date (1.10.0 is recommended). CocoaPods is used to retrieve the iOS and macOS platform side's plugin code that responds to your plugin usage on the Dart side. Without CocoaPods, plugins will not work on iOS or macOS. For more info, see https://flutter.dev/platform-plugins To upgrade see https://guides.cocoapods.org/using/getting-started.html#installation for instructions. [✓] Chrome - develop for the web [✓] Android Studio (version 4.2) [✓] VS Code (version 1.59.0) [✓] Connected device (2 available) ! Doctor found issues in 2 categories. ```

Flutter dependencies

Run flutter pub deps -- --style=compact and paste the output below:

Click To Expand

``` Dart SDK 2.13.4 Flutter SDK 2.2.3 zag 1.3.0+53 dependencies: - async 2.6.1 [meta collection] - blurhash_dart 1.0.2 [image] - cached_network_image 3.1.0 [flutter flutter_cache_manager octo_image cached_network_image_platform_interface cached_network_image_web] - cloud_firestore 2.5.3 [cloud_firestore_platform_interface cloud_firestore_web collection firebase_core firebase_core_platform_interface flutter meta] - cloud_functions 3.0.4 [cloud_functions_platform_interface cloud_functions_web firebase_core firebase_core_platform_interface flutter] - confetti 0.6.0 [flutter vector_math] - connectivity 3.0.6 [flutter meta connectivity_platform_interface connectivity_macos connectivity_for_web] - crop_your_image 0.6.0+1 [flutter image] - cupertino_icons 1.0.3 - dart_geohash 2.0.1 - firebase_auth 3.1.2 [firebase_auth_platform_interface firebase_auth_web firebase_core firebase_core_platform_interface flutter meta] - firebase_core 1.7.0 [firebase_core_platform_interface firebase_core_web flutter meta] - firebase_dynamic_links 2.0.10 [firebase_core flutter] - firebase_messaging 10.0.8 [firebase_core firebase_core_platform_interface firebase_messaging_platform_interface firebase_messaging_web flutter meta] - firebase_storage 10.0.4 [firebase_core firebase_core_platform_interface firebase_storage_platform_interface firebase_storage_web flutter] - flutter 0.0.0 [characters collection meta typed_data vector_math sky_engine] - flutter_blurhash 0.6.0 [flutter meta pedantic] - flutter_keyboard_visibility 5.0.3 [meta flutter_keyboard_visibility_platform_interface flutter_keyboard_visibility_web flutter] - flutter_localizations 0.0.0 [flutter intl characters clock collection meta path typed_data vector_math] - flutter_riverpod 0.14.0+3 [collection flutter meta riverpod state_notifier] - flutter_secure_storage 4.2.1 [meta flutter] - flutter_svg 0.22.0 [flutter meta path_drawing vector_math xml] - flutter_webview_plugin 0.4.0 [flutter] - geocoding 2.0.1 [flutter geocoding_platform_interface] - geolocator 7.6.2 [flutter geolocator_platform_interface geolocator_android geolocator_apple geolocator_web] - get_it 7.2.0 [async collection] - google_maps_flutter 2.0.9 [flutter flutter_plugin_android_lifecycle google_maps_flutter_platform_interface] - google_maps_webservice 0.0.20-nullsafety.5 [http meta json_annotation] - horizontal_blocked_scroll_physics 4.0.0 [flutter pedantic] - http 0.13.3 [async http_parser meta path pedantic] - image 3.0.7 [archive meta xml] - image_picker 0.8.4+1 [flutter flutter_plugin_android_lifecycle image_picker_for_web image_picker_platform_interface] - intl 0.17.0 [clock path] - intl_phone_number_input 0.7.0+2 [flutter meta libphonenumber_plugin equatable collection] - mime 1.0.0 - octo_image 1.0.0+1 [flutter flutter_blurhash] - open_settings 2.0.2 [flutter] - overlay_support 1.2.1 [flutter async] - package_info 2.0.2 [flutter] - photo_view 0.12.0 [flutter] - pin_code_fields 7.3.0 [flutter] - provider 5.0.0 [collection flutter nested] - proximity_hash 2.0.0 - responsive_image 0.1.0 [flutter] - share 2.0.4 [meta mime flutter] - shared_preferences 2.0.7 [flutter meta shared_preferences_linux shared_preferences_macos shared_preferences_platform_interface shared_preferences_web shared_preferences_windows] - shimmer 2.0.0 [flutter] - timeago 3.1.0 - transparent_pointer 1.0.0 [flutter] - tuple 2.0.0 [quiver] - url_launcher 6.0.10 [flutter meta url_launcher_linux url_launcher_macos url_launcher_platform_interface url_launcher_web url_launcher_windows] - uuid 3.0.4 [crypto] - zcluster 1.1.1 - zgh 0.0.1 dev dependencies: - dart_code_metrics 4.1.0 [analyzer analyzer_plugin ansicolor args collection crypto file glob html meta path quiver source_span yaml] - flutter_driver 0.0.0 [file flutter flutter_test fuchsia_remote_debug_protocol path meta vm_service webdriver archive async boolean_selector characters charcode clock collection crypto matcher platform process source_span stack_trace stream_channel string_scanner sync_http term_glyph test_api typed_data vector_math] - flutter_native_splash 1.2.3 [args image meta path xml yaml universal_io] - flutter_test 0.0.0 [flutter test_api path fake_async clock stack_trace vector_math async boolean_selector characters charcode collection matcher meta source_span stream_channel string_scanner term_glyph typed_data] - integration_test 0.0.0 [flutter flutter_driver flutter_test path vm_service archive async boolean_selector characters charcode clock collection crypto fake_async file matcher meta source_span stack_trace stream_channel string_scanner sync_http term_glyph test_api typed_data vector_math webdriver] - paginate_firestore 1.0.2 [flutter bloc flutter_bloc cloud_firestore provider] transitive dependencies: - _fe_analyzer_shared 22.0.0 [meta] - analyzer 1.7.1 [_fe_analyzer_shared cli_util collection convert crypto glob meta package_config path pub_semver source_span watcher yaml pedantic] - analyzer_plugin 0.6.0 [analyzer collection dart_style pub_semver] - ansicolor 2.0.1 - archive 3.1.2 [crypto path] - args 2.3.0 - bloc 7.2.1 [meta] - boolean_selector 2.1.0 [source_span string_scanner] - cached_network_image_platform_interface 1.0.0 [flutter flutter_cache_manager] - cached_network_image_web 1.0.1 [flutter flutter_cache_manager cached_network_image_platform_interface] - characters 1.1.0 - charcode 1.2.0 - cli_util 0.3.3 [meta path] - clock 1.1.0 - cloud_firestore_platform_interface 5.4.2 [collection firebase_core flutter meta plugin_platform_interface] - cloud_firestore_web 2.4.3 [cloud_firestore_platform_interface collection firebase_core firebase_core_web flutter flutter_web_plugins js] - cloud_functions_platform_interface 5.0.11 [firebase_core flutter meta plugin_platform_interface] - cloud_functions_web 4.0.13 [cloud_functions_platform_interface firebase_core firebase_core_web flutter flutter_web_plugins js] - collection 1.15.0 - connectivity_for_web 0.4.0+1 [connectivity_platform_interface flutter_web_plugins flutter] - connectivity_macos 0.2.1+2 [flutter connectivity_platform_interface] - connectivity_platform_interface 2.0.1 [flutter meta plugin_platform_interface] - convert 3.0.1 [typed_data] - cross_file 0.3.1+5 [flutter meta] - crypto 3.0.1 [collection typed_data] - csslib 0.17.0 [source_span] - dart_style 2.1.1 [analyzer args path pub_semver source_span] - equatable 2.0.3 [collection meta] - fake_async 1.2.0 [clock collection] - ffi 1.1.2 - file 6.1.0 [meta path] - firebase_auth_platform_interface 6.1.1 [firebase_core flutter meta plugin_platform_interface] - firebase_auth_web 3.1.1 [firebase_auth_platform_interface firebase_core firebase_core_web flutter flutter_web_plugins http_parser intl js meta] - firebase_core_platform_interface 4.0.1 [collection flutter meta plugin_platform_interface] - firebase_core_web 1.1.0 [firebase_core_platform_interface flutter flutter_web_plugins js meta] - firebase_messaging_platform_interface 3.0.6 [firebase_core flutter meta plugin_platform_interface] - firebase_messaging_web 2.0.6 [firebase_core firebase_core_web firebase_messaging_platform_interface flutter flutter_web_plugins js meta] - firebase_storage_platform_interface 4.0.3 [collection firebase_core flutter meta plugin_platform_interface] - firebase_storage_web 3.0.3 [async firebase_core firebase_core_web firebase_storage_platform_interface flutter flutter_web_plugins http js meta] - flutter_bloc 7.1.0 [flutter bloc provider] - flutter_cache_manager 3.1.2 [clock collection file flutter http path path_provider pedantic rxdart sqflite uuid] - flutter_keyboard_visibility_platform_interface 2.0.0 [flutter meta plugin_platform_interface] - flutter_keyboard_visibility_web 2.0.0 [flutter_keyboard_visibility_platform_interface flutter_web_plugins flutter] - flutter_plugin_android_lifecycle 2.0.3 [flutter] - flutter_web_plugins 0.0.0 [flutter js characters collection meta typed_data vector_math] - freezed_annotation 0.14.2 [collection json_annotation meta] - fuchsia_remote_debug_protocol 0.0.0 [process vm_service file meta path platform] - geocoding_platform_interface 2.0.1 [flutter meta plugin_platform_interface] - geolocator_android 1.0.2 [flutter geolocator_platform_interface] - geolocator_apple 1.2.1 [flutter geolocator_platform_interface] - geolocator_platform_interface 2.3.6 [flutter plugin_platform_interface vector_math meta] - geolocator_web 2.0.6 [flutter flutter_web_plugins geolocator_platform_interface] - glob 2.0.1 [async collection file path pedantic string_scanner] - google_maps_flutter_platform_interface 2.1.2 [collection flutter meta plugin_platform_interface stream_transform] - html 0.15.0 [csslib source_span] - http_parser 4.0.0 [charcode collection source_span string_scanner typed_data] - image_picker_for_web 2.1.3 [flutter flutter_web_plugins image_picker_platform_interface meta] - image_picker_platform_interface 2.4.1 [flutter http meta plugin_platform_interface cross_file] - js 0.6.3 - json_annotation 4.0.1 - libphonenumber 2.0.2 [flutter meta] - libphonenumber_platform_interface 0.3.1 [flutter plugin_platform_interface] - libphonenumber_plugin 0.2.3 [flutter flutter_web_plugins libphonenumber_platform_interface libphonenumber_web libphonenumber] - libphonenumber_web 0.2.0+1 [flutter flutter_web_plugins js libphonenumber_platform_interface] - matcher 0.12.10 [stack_trace] - meta 1.3.0 - nested 1.0.0 [flutter] - package_config 2.0.2 [path] - path 1.8.0 - path_drawing 0.5.1 [vector_math meta path_parsing flutter] - path_parsing 0.2.1 [vector_math meta] - path_provider 2.0.4 [flutter path_provider_linux path_provider_macos path_provider_platform_interface path_provider_windows] - path_provider_linux 2.1.0 [flutter path path_provider_platform_interface xdg_directories] - path_provider_macos 2.0.2 [flutter] - path_provider_platform_interface 2.0.1 [flutter meta platform plugin_platform_interface] - path_provider_windows 2.0.3 [ffi flutter meta path path_provider_platform_interface win32] - pedantic 1.11.1 - petitparser 4.1.0 [meta] - platform 3.0.0 - plugin_platform_interface 2.0.1 [meta] - process 4.2.1 [file path platform] - pub_semver 2.1.0 [collection meta] - quiver 3.0.1 [matcher] - riverpod 0.14.0+3 [collection freezed_annotation meta state_notifier] - rxdart 0.27.2 - shared_preferences_linux 2.0.2 [file meta flutter path path_provider_linux shared_preferences_platform_interface] - shared_preferences_macos 2.0.2 [flutter shared_preferences_platform_interface] - shared_preferences_platform_interface 2.0.0 [flutter] - shared_preferences_web 2.0.2 [flutter flutter_web_plugins meta shared_preferences_platform_interface] - shared_preferences_windows 2.0.2 [flutter file meta path path_provider_platform_interface path_provider_windows shared_preferences_platform_interface] - sky_engine 0.0.99 - source_span 1.8.1 [collection path term_glyph] - sqflite 2.0.0+4 [flutter sqflite_common path] - sqflite_common 2.0.1+1 [synchronized path meta] - stack_trace 1.10.0 [path] - state_notifier 0.7.1 [meta] - stream_channel 2.1.0 [async] - stream_transform 2.0.0 - string_scanner 1.1.0 [charcode source_span] - sync_http 0.3.0 - synchronized 3.0.0 - term_glyph 1.2.0 - test_api 0.3.0 [async boolean_selector collection meta path source_span stack_trace stream_channel string_scanner term_glyph matcher] - typed_data 1.3.0 [collection] - universal_io 2.0.4 [collection crypto meta typed_data] - url_launcher_linux 2.0.2 [flutter] - url_launcher_macos 2.0.2 [flutter] - url_launcher_platform_interface 2.0.4 [flutter plugin_platform_interface] - url_launcher_web 2.0.4 [flutter flutter_web_plugins meta url_launcher_platform_interface] - url_launcher_windows 2.0.2 [flutter] - vector_math 2.1.0 - vm_service 6.2.0 - watcher 1.0.0 [async path pedantic] - webdriver 3.0.0 [archive matcher path stack_trace sync_http] - win32 2.2.9 [ffi] - xdg_directories 0.2.0 [meta path process] - xml 5.1.2 [collection meta petitparser] - yaml 3.1.0 [collection source_span string_scanner] ```

markusaksli-nc commented 3 years ago

Hi @theochampion https://firebase.flutter.dev/docs/auth/usage#sign-in

Note: uninstalling your application on iOS or macOS can still preserve your users authentication state between app re-installs as the underlying Firebase iOS SDK persists authentication state to keychain. See #4661 for more information.

Closing this as documented behavior of the underlying SDK. Thank you

tzvc commented 3 years ago

@markusaksli-nc I'm aware of this intended behavior in IOS. However, I'm running into the issue on Android on which I believe it is not normal (or not documented).

I tried everything, signing out, clearing the app cache, uninstalling and even restarting my device. When I download the app from the store again and open it, I'm still logged in.

yamauchieduardo commented 2 years ago

Hi @theochampion

I had this issue a long time ago, this is a behavior expected by Android applications.

You can deactivate that (by default is enable):

In your androidManifest.xml (usually found in android\app\src\main\AndroidManifest.xml)

    <application
        android:allowBackup="false"
        android:icon="@mipmap/ic_launcher"
        android:label="AplicationName">

Set the flag android:allowBackup to false.

For more information see: https://developer.android.com/guide/topics/data/autobackup#EnablingAutoBackup

I hope this help you.

russellwheatley commented 2 years ago

As @yamauchieduardo mentioned, this is expected behaviour on android. Please follow his instructions if you wish to disable this behaviour. Thanks.

firebase / flutterfire