Skip to content
Get a quote

Firebase Auth errorFirebase Auth: auth/unauthorized-continue-uri

auth/unauthorized-continue-uri is the Firebase Auth error for sending a password reset, email verification or email sign-in link whose continue URL is on a domain missing from Authorized domains. It can appear after a move to a new domain or a preview deploy.

Short answer

In the Firebase console, open Authentication settings and add the continue URL’s domain under Authorized domains. Then check the url in ActionCodeSettings: it must be a full, valid URL on that domain, and each environment should send its own.

Rather not fix it yourself? App Fix Ticket starts with a fixed-price diagnosis, then a fixed price for the fix before any fix work.

Why the continue URL is rejected, and the fix

  1. 01

    The domain is not on Authorized domains

    “In order to securely pass a continue URL, you need to add the domain for the URL as an authorized domain” Firebase, Passing state in email actions

    A new production domain, a staging site or a preview URL has to be added before email links can point to it. Add the exact domain the url uses.

  2. 02

    The code sends a different domain than you think

    “The domain of the continue URL is not whitelisted.” Firebase, Admin Authentication API errors (auth/unauthorized-continue-uri)

    A url built from an environment variable or from window.location can point at localhost, a preview host or the old domain. Log the url you pass in ActionCodeSettings and compare it with the Authorized domains list.

  3. 03

    The url is not a valid URL

    “The continue URL must be a valid URL string.” Firebase, Admin Authentication API errors (auth/invalid-continue-uri)

    A path without the scheme and host, or a malformed string, can fail with the related auth/invalid-continue-uri. Pass a full URL such as https://example.com/finish.

  4. 04

    Mobile link settings are a separate check

    Not a cause of this error, but check it once the domain is fixed: with handleCodeInApp set to true, the link is sent as a Universal Link or Android App Link and opened by the app if installed, so the iOS bundle ID and Android package name in ActionCodeSettings need to be set and match the app.

Checked against the vendor’s docs on : Firebase docs: Passing state in email actions; Firebase docs: Admin Authentication API errors; Firebase JS SDK reference: firebase/auth.

Rather hand it over?

Fixed scope, fixed price, paid upfront. The work happens in writing; no call needed.

“Very responsive, attentive to fixing bugs, and completed the project as needed! Thank you!”
A buyer in the United States, July 2022. Shopify on Fiverr
All 127 Fiverr reviews

Related: Firebase auth/unauthorized-domain · Firebase auth/invalid-action-code · Firebase Dynamic Links shutdown · Firebase auth/billing-not-enabled

Questions

More on this error

Is it the same as auth/unauthorized-domain?

Close. Both use the Authorized domains list, but auth/unauthorized-domain is about the page running sign-in, and this one is about the continue URL inside an email link.

Do I need to add localhost?

Only if your code sends a localhost continue URL while testing. Add each domain your code actually sends.

Can you fix it for me?

If one bug is the whole problem, the App Fix Ticket covers it: a written diagnosis first, then the fix. If the app has more going on, the Launch Check is a written check of the whole app. Each issue found is rated critical, high, medium or low, with where it is and how it was confirmed. No issues worth fixing, no charge. If the Launch Check finds nothing rated medium or higher, Simon refunds the full $450. You keep the report either way. This applies to the first 10 Launch Checks bought after October 30, 2026.

A different error?

Describe it and get a written quote

Send the error and what you were doing. You get a written scope, a fixed price and a timeline; Simon replies by email, usually within one business day.

Describe your problem All fixes