Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] in sample: Spotify Auth #1154

Open
millscan opened this issue Jul 14, 2024 · 0 comments
Open

[BUG] in sample: Spotify Auth #1154

millscan opened this issue Jul 14, 2024 · 0 comments

Comments

@millscan
Copy link

Which sample has a bug?

Spotify Auth
https://github.com/firebase/functions-samples/blob/main/Node-1st-gen/spotify-auth/functions/index.js

How to reproduce the issue

N/A

Debug output

N/A

Expected behavior

customToken.emailVerified should be unset or set to false upon creation.

The Spotify API documentation states that emails are not verified by Spotify. Incorrectly setting emailVerified to true can create security vulnerabilities.

Actual behavior

customToken.emailVerified is set to true upon creation

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant