I'm designing an app in android studio using Firebase Realtime. There is a problem that has been bugging me for some time.
Indeed, the firebase authentication function allows you to send a link to validate your email address. However, firebase does not allow you to customize the template of the email sent for spam prevention reasons. Does anyone know how to proceed (with tools (SMTP ...), and other ancillary services) to have a sufficiently dressed email (images, application logo .... ect).
ps: I am a beginner.
I found many answers on many sites but none that is clear enough.
thank you friends for your help :)
enter image description here
Related
I've just had an Android Firebase app penetration tested, and the tester found a file com.google.Firebase.auth.api.xml within Shared Preferences. It contained the access_token + refresh_token (which could be used to access the Firebase API).
Has anyone else experienced this vulnerability and know the best way to fix it?
(I can't work out or understand why this information is being stored locally, I've taken a look through the Firebase documentation and through my app and as far as I can tell everything is integrated properly. The app itself uses Firebase as the backend server which handles logins, authentication, Firestore and Storage)
Any help would be massively appreciated.
Got in touch with Firebase and this is the response for anyone interested:
"I understand your concern, as you have said the file is used to re-authenticate the user, however, those values are set after a successful login and the SDK updates that file each hour. The vulnerabilities that you may have noticed should be related to modifying information related to that specific user and the features or data the user has access to. Please remember that the Firebase security is not only on the Authentication product, they are more tools that enforce the security in a Firebase application, that is the reason why your Security Rules should avoid insecure rules and match with your business model."
I'm working on an app that lets users submit orders, and also make custom orders where they upload an image. I then want to receive all this information by email. Initially, I was using JavaMail API with Gmail, but I heard that it can cause a blocking of the account due to "Suspicious Activity". Apparently a way around this is to use the Amazon SES SMTP server, but with that I cannot seem to find any documentation whatsoever on sending emails with attachments for Android (there is one but it's for general Java and it does not work on Android).
There must be a better way to to do this, I'm just not sure where to start looking. This is my first dev project (I'm in my 2nd year of computer science), so I'm pretty green with this stuff. If someone could point me in the right direction I would be so grateful. I'm open to learning new things, I'm just not even sure about what I need to learn in the first place for this.
your email will be blocked if you are sending emails in huge amount like hundreds of email in a second if you are not sending email in such amount so don't worry about getting blocked and if you are sending in email in such amount then you can take external email service theirs a lot of marketing via email services i hope this might help
I'm building a standalone swing application that connects to all modern mail services like Hotmail, Outlook, Gmail.
My case is:
Show to user small window like "enter you mail and pass"
Obtain all emails and show them to user
And this is place where problems started. All guidelines and tutorials send me to use OAuth protocol. It's not obvious to me and i really can't get where the user login+pass is. Also I can't use any other way to connect to gmail 'cause this is part of functionality (and what customer wants). How to make user connect to his mail without any interaction except entering mail and pass?
Any help will be appreciated. Thanks in advance.
Hello I am creating some cards game online using LibGDX, and I want to connect my app using facebook so they can invite friends to join the game room. I want to make people to connect without having facebook too.
The game should not have authentication besides facebook, users without facebook just enter their nickname and they will have user-id that can be used to get invited.
My question is, what would be the best way to integrate it so this can be done in both ways?
What if friends in facebook doesn't have that application? Is there a way to detect friends that have that app? Or a way to invite them to download this app and connect?
And how does facebook integration work for my case?
My question is, what would be the best way to integrate it so this can
be done in both ways?
First of all you need some kind of server which handles all the user accounts/nicknames/login/logout etc.
After this works you can add Facebook integration. Since Facebook provides an unique id for each user you just have to link this id to a normal user account on your server. So the user has two ways to login: A) normal login (just nickname) and B) Facebook, which redirects login to the linked normal account.
Advantage: You can add other login options (Google+, Twitter, ...) later on easily. Just link to the normal account.
What if friends in facebook doesn't have that application?
Does not matter, since your server does not know whether somebody has logged in from facebook or normal way. He just matches the logged in players and good to go.
Is there a way to detect friends that have that app?
I do not know if there is currently a solution for that. Due to privacy regulations this will change from time to time.
Or a way to invite them to download this app and connect?
Facebook SDK allows you to open friend invite dialog. You can customize as well. https://developers.facebook.com/docs/app-invites
And how does Facebook integration work for my case?
As said above: Server, login normal, link facebook logins.
If you want to use Facebook to handle game related stuff then there is now way to play your game without Facebook.
I have spent lot of time, but alas! I am stuck in this problem. I want to send email in background in android application but I can't find way, how can I do it. Please anybody tell me some way how can I send background email in android application for forget password.
I use a backend like Backendless that allow you to manage your users login, password recovery, register, etc..
Good API, easy to use and a great and growing community who can help you any time.