Firebase still retrieving authData after deletion

Question

After I manually deleted the account connected to the uid that my iphone simulator is on (from firebase dashboard), when I run the code below it's somehow still authenticating and retrieving a uid. How is this possible?

let ref = Firebase(url: "https://moviebuffapp.firebaseio.com/")

override func viewDidLoad() {
    super.viewDidLoad()

    if ref.authData != nil {

        let uid = ref.authData.uid
        print(uid)

score 31 · Accepted Answer · edited May 23 '17 at 12:34

31

Deleting an account does not automatically expire the current session(s) for that account. Their current sessions will remain valid until they expire. You can set the session expiration interval in your Firebase Dashboard.

If you want to force the user to be logged out, call ref.unauth().

But in general you'll likely want to build authorization rules to prevent such users with valid tokens from deleted accounts to make changes to the data.

If you keep the user profiles in your database, you can check whether that record still exists in your security rules: root.child('users').child(auth.uid).exists().

Also see:

edited May 23 '17 at 12:34

Community

1
1

answered Mar 12 '16 at 17:49

Frank van Puffelen

565,676
79
828
807

Got it, that makes sense. Thank you! – FortuneFaded Mar 12 '16 at 18:02
1

If you want to talk about how Stack Overflow operates, please post a question (or search first) on http://meta.stackoverflow.com/. – Frank van Puffelen Jan 14 '21 at 18:27

Firebase still retrieving authData after deletion

1 Answers1

Linked

Related