index.html single-page app rewrite rule defeats email actions paths

Firebase CLI prompts users to set a rewrite rule for SPAs.

    "rewrites": [
      {
        "source": "**/!{*.*}",
        "destination": "/index.html"
      }
    ]

Email verification, email change notification emails and password reset emails all use the __/auth/action paths. These auth action urls forward to index.html given the SPA rewrite rule.

And can anyone who knows Firebase glob patterns figure out some way to exclude paths beginning in __ from the rewrite?

[Aicos]

Ok, its seems the service worker was intercepting the requests.

Fixed it by adding a navigateFallbackWhitelist property to sw-precache-config.js:

module.exports = {
  staticFileGlobs: [
    '/index.html',
    '/manifest.json',
    '/bower_components/webcomponentsjs/webcomponents-lite.min.js',
  ],
  navigateFallback: 'index.html',
  navigateFallbackWhitelist: [/^(?!\/__)/]
};

Also note that what I said about it affecting custom and non-custom domains was wrong (after more testing). Localhost and custom domains work fine; the problem only occurs on firebaseapp.com sub-domains but can be fixed with the above configuration.

[mbleigh]

Do you have a service worker that has its own rewrite logic? The /__/auth/* reserved URLs take precedence over user-supplied rewrites (I double-confirmed that today), but if you have a service worker doing its own rewriting that could explain the issue.