fix(auth, ios): reject multi-factor API call if session not found

behavior should mirror what android native MFA does with this change
invertase · May 20, 2024 · 3e397a4 · 3e397a4
1 parent b815ea3
commit 3e397a4
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/packages/auth/ios/RNFBAuth/RNFBAuthModule.m b/packages/auth/ios/RNFBAuth/RNFBAuthModule.m
@@ -892,8 +892,15 @@ - (void)invalidate {
  DLog(@"verifyPhoneNumberForMultifactor phoneNumber: %@", phoneNumber);
  DLog(@"verifyPhoneNumberForMultifactor sessionId: %@", sessionId);
  FIRMultiFactorSession *session = cachedSessions[sessionId];
- DLog(@"using instance VerifyPhoneNumberForMultifactor: %@",
- firebaseApp.name)[[FIRPhoneAuthProvider providerWithAuth:[FIRAuth authWithApp:firebaseApp]]
+ if (session == nil) {
+ [RNFBSharedUtils rejectPromiseWithUserInfo:reject
+ userInfo:(NSMutableDictionary *)@{
+ @"code" : @"invalid-multi-factor-session",
+ @"message" : @"can't find session for provided key"
+ }];
+ return;
+ }
+ [[FIRPhoneAuthProvider providerWithAuth:[FIRAuth authWithApp:firebaseApp]]
  verifyPhoneNumber:phoneNumber
  UIDelegate:nil
  multiFactorSession:session