How Can I Restrict Google Login To My Company's Email Domain (@company.com) In React Native?

Question What is the best way to prevent users from using an email address that does not end in @mycompany.com from logging in to our internal app through Firebase/Google auth? Goa

Solution 1:

There is no way to limit who can authenticate with the default Firebase Authentication Google provider. But all the user does by signing in is authenticating themselves: "I am Frank van Puffelen and here's the proof".

You can restrict what resources users have access to. For example for the Firebase Database you can use its server-side security rules to determine what each user is authorized to access. Here you can limit access to users from a specific domain.

Also see:

• Limit Firebase Google OAuth Authentication to specific users
• How to disable Signup in Firebase 3.x