Now checking if the email is confirmed before we authenticate

Author: wesleylima

rest_framework_firebase/__init__.py

@@ -1,7 +1,7 @@
 # -*- coding: utf-8 -*-
 
 __title__ = 'djangorestframework-firebase-auth'
-__version__ = '0.1.1'
+__version__ = '0.1.2'
 __author__ = 'Wesley Lima'
 __license__ = 'MIT'
 __copyright__ = 'Copyright 2018 Fan Retreat, Inc.'

rest_framework_firebase/authentication.py

@@ -53,8 +53,10 @@ def authenticate_credentials(self, payload):
         if not uid:
             msg = _('Invalid payload.')
             raise exceptions.AuthenticationFailed(msg)
-
         try:
+            if 'email_verified' not in payload or ('email_verified' in payload and not payload['email_verified']):
+                msg = _('User email not yet confirmed.')
+                raise exceptions.AuthenticationFailed(msg)
             user = User.objects.get(**{uid_field: uid})
         except User.DoesNotExist:
             if not api_settings.FIREBASE_CREATE_NEW_USER: