Skip to content

Commit 8792280

Browse files
committed
fix(auth, ios): reject multi-factor API call if session not found
behavior should mirror what android native MFA does with this change
1 parent c562d44 commit 8792280

File tree

1 file changed

+9
-2
lines changed

1 file changed

+9
-2
lines changed

packages/auth/ios/RNFBAuth/RNFBAuthModule.m

+9-2
Original file line numberDiff line numberDiff line change
@@ -892,8 +892,15 @@ - (void)invalidate {
892892
DLog(@"verifyPhoneNumberForMultifactor phoneNumber: %@", phoneNumber);
893893
DLog(@"verifyPhoneNumberForMultifactor sessionId: %@", sessionId);
894894
FIRMultiFactorSession *session = cachedSessions[sessionId];
895-
DLog(@"using instance VerifyPhoneNumberForMultifactor: %@",
896-
firebaseApp.name)[[FIRPhoneAuthProvider providerWithAuth:[FIRAuth authWithApp:firebaseApp]]
895+
if (session == nil) {
896+
[RNFBSharedUtils rejectPromiseWithUserInfo:reject
897+
userInfo:(NSMutableDictionary *)@{
898+
@"code" : @"invalid-multi-factor-session",
899+
@"message" : @"can't find session for provided key"
900+
}];
901+
return;
902+
}
903+
[[FIRPhoneAuthProvider providerWithAuth:[FIRAuth authWithApp:firebaseApp]]
897904
verifyPhoneNumber:phoneNumber
898905
UIDelegate:nil
899906
multiFactorSession:session

0 commit comments

Comments
 (0)