Restrict Firebase App Invitations to Only the Intended Google Account (Prevent Forwarded Email Access)
Hi all,
We send Firebase app invitations only to our company domain emails, but the invitation email can be forwarded and accepted by a personal Gmail account, which creates a security concern.
Is there a way to:
Restrict invitation acceptance to only the Google account that received the email
Or limit access to company-domain Google accounts only
Prevent forwarded invitations from granting access to unauthorized users
Any best practices or Firebase-supported solutions would be appreciated. Thanks!
2
votes