Open
Description
Which sample has a bug?
Spotify Auth
https://github.com/firebase/functions-samples/blob/main/Node-1st-gen/spotify-auth/functions/index.js
How to reproduce the issue
N/A
Debug output
N/A
Expected behavior
customToken.emailVerified should be unset or set to false upon creation.
The Spotify API documentation states that emails are not verified by Spotify. Incorrectly setting emailVerified to true can create security vulnerabilities.
Actual behavior
customToken.emailVerified is set to true upon creation