search

near / fast-auth-signer

https://fast-auth-signer.vercel.app
MIT License
30 stars 9 forks source link

Remove account exist check #153

Closed hcho112 closed 8 months ago

hcho112 commented 8 months ago

This PR contains implementation for supporting enable email enumeration protection on firebase.

This change is part of security improvement where this change will stop from hackers to see if specific email is being used on fast-auth or not.

From this change, regardless of email registered or not, it will trigger verify email check. If someone uses a specific email without create account first, it will still send email with verification link, but after link is being clicked, it will return with error:

image

In terms of post merge, we need to land this PR to production prior to enabling the configuration on firebase console.

vercel[bot] commented 8 months ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
fast-auth-signer ✅ Ready (Inspect) Visit Preview 💬 Add feedback Jan 16, 2024 10:17pm