I want to restrict application access to certain domain names and will be using email link authentication only. In other words only users from xyz.com will receive authentication links via email and email link authentication initiated for email addresses in any other domain will fail to process.

Is this possible?

CodePudding user response：

I don't think it's possible to prevent users from getting the email link, but you can prevent them from signing up/in by implementing the beforeCreate and beforeSignIn blocking Cloud Functions mentioned here.