How to Enable Email Verification in Firebase Auth

1import { getAuth, createUserWithEmailAndPassword, sendEmailVerification } from 'firebase/auth'
2
3const auth = getAuth()
4
5async function signUpWithVerification(email: string, password: string) {
6  const userCredential = await createUserWithEmailAndPassword(auth, email, password)
7  const user = userCredential.user
8
9  await sendEmailVerification(user)
10  console.log('Verification email sent to', email)
11
12  return user
13}

1import { sendEmailVerification } from 'firebase/auth'
2
3const actionCodeSettings = {
4  url: 'https://your-app.com/verified',
5  handleCodeInApp: false,
6}
7
8async function sendVerification(user: any) {
9  await sendEmailVerification(user, actionCodeSettings)
10}

1import { getAuth } from 'firebase/auth'
2
3const auth = getAuth()
4
5async function checkVerification() {
6  const user = auth.currentUser
7  if (!user) return false
8
9  // Refresh the user's profile from the server
10  await user.reload()
11
12  if (user.emailVerified) {
13    console.log('Email is verified')
14    return true
15  } else {
16    console.log('Email is not yet verified')
17    return false
18  }
19}

1import { useEffect, useState } from 'react'
2import { getAuth, onAuthStateChanged, sendEmailVerification, User } from 'firebase/auth'
3
4function useAuth() {
5  const [user, setUser] = useState<User | null>(null)
6  const [verified, setVerified] = useState(false)
7
8  useEffect(() => {
9    const auth = getAuth()
10    const unsubscribe = onAuthStateChanged(auth, async (firebaseUser) => {
11      if (firebaseUser) {
12        await firebaseUser.reload()
13        setUser(firebaseUser)
14        setVerified(firebaseUser.emailVerified)
15      } else {
16        setUser(null)
17        setVerified(false)
18      }
19    })
20    return () => unsubscribe()
21  }, [])
22
23  const resendVerification = async () => {
24    if (user && !user.emailVerified) {
25      await sendEmailVerification(user)
26    }
27  }
28
29  return { user, verified, resendVerification }
30}

1// firestore.rules
2rules_version = '2';
3service cloud.firestore {
4  match /databases/{database}/documents {
5
6    // Only verified users can read or write posts
7    match /posts/{postId} {
8      allow read, write: if request.auth != null
9        && request.auth.token.email_verified == true;
10    }
11
12    // Public data readable by anyone authenticated
13    match /public/{docId} {
14      allow read: if request.auth != null;
15    }
16  }
17}