如何确保Firebase注册时输入的邮箱为真实有效邮箱？

我是Flutter和Dart新手，但具备一定编程基础。当前使用Firebase的createUserWithEmailAndPassword方法创建用户时，即使输入随机邮箱也能成功创建账号，无法验证邮箱是否真实有效。请问该如何解决此问题？

我的实现代码 #

控制器初始化与销毁 #

void initState() {
  late final _email = TextEditingController();
  late final _firstName = TextEditingController();
  late final _familyName = TextEditingController();
  late final _password = TextEditingController();
  super.initState();
}

@override
void dispose() {
  _email.dispose();
  _firstName.dispose();
  _familyName.dispose();
  _password.dispose();
  super.dispose();
}

按钮点击事件 #

onPressed: () async {
    final email = _email.text.trim();
    final password = _password.text.trim();
    try {
      FirebaseFirestore.instance;
      final usercredential =
          await FirebaseAuth.instance
              .createUserWithEmailAndPassword(
                  email: email,
                  password: password);
      final userEmail =
          usercredential.user?.email;
      print(usercredential);
      if (userEmail == email) {
        Navigator.pushAndRemoveUntil(
          context,
          MaterialPageRoute(
            builder: (context) =>
                UsernameAndPhonenumber(),
          ),
          (route) => route.isFirst,
        );
      } else {
        setState(() {
          msg = "Please verify your email";
        });
      }
    } on FirebaseAuthException catch (e) {
      if (e.code == "channel-error") {
        setState(() {
          msg = "Can't be empty";
        });
      } else if (e.code ==
          "weak-password") {
        print("weak password");
        setState(() {
          msg =
              "The password provided is too weak.";
        });
      } else if (e.code ==
          "email-already-in-use") {
        print(
            "The account already exists for that email.");
        setState(() {
          msg =
              "The account already exists for that email.";
        });
      } else if (e.code ==
          "invalid-email") {
        print("invalid email");
        setState(() {
          msg = "invalid email";
        });
      } else {
        print("SOME ERROR HAPPENED HERE");
        print(e.code);
        print(e.code);
        setState(() {
          msg = "unknown erorr occured";
        });
      }
    }
  },

Firebase Auth的createUserWithEmailAndPassword只会校验邮箱格式（比如是否包含@），不会验证邮箱是否真实存在、能否接收邮件。要实现真实邮箱验证，必须开启邮箱验证流程，具体步骤如下：

1. 创建用户后立即发送验证邮件 #

修改按钮点击事件，在创建用户成功后调用sendEmailVerification发送验证邮件，同时不要直接跳转核心页面，而是提示用户去邮箱验证：

onPressed: () async {
  final email = _email.text.trim();
  final password = _password.text.trim();
  try {
    final usercredential = await FirebaseAuth.instance.createUserWithEmailAndPassword(
      email: email,
      password: password,
    );

    // 发送邮箱验证邮件
    await usercredential.user?.sendEmailVerification();

    // 提示用户去邮箱验证，替换原来的跳转逻辑
    setState(() {
      msg = "验证邮件已发送，请查收邮箱完成验证后登录";
    });

    // 可选：跳转到登录页面，让用户验证后重新登录
    // Navigator.pushReplacement(context, MaterialPageRoute(builder: (context) => LoginPage()));
  } on FirebaseAuthException catch (e) {
    // 保留原来的错误处理逻辑并汉化提示
    if (e.code == "channel-error") {
      setState(() { msg = "内容不能为空"; });
    } else if (e.code == "weak-password") {
      setState(() { msg = "密码强度不足"; });
    } else if (e.code == "email-already-in-use") {
      setState(() { msg = "该邮箱已注册"; });
    } else if (e.code == "invalid-email") {
      setState(() { msg = "邮箱格式无效"; });
    } else {
      setState(() { msg = "发生未知错误"; });
    }
  }
},

2. 登录时校验邮箱验证状态 #

用户登录后，检查其邮箱是否已验证，未验证则限制访问核心功能：

// 示例登录逻辑
void _login() async {
  final email = _email.text.trim();
  final password = _password.text.trim();
  try {
    await FirebaseAuth.instance.signInWithEmailAndPassword(
      email: email,
      password: password,
    );

    final currentUser = FirebaseAuth.instance.currentUser;
    if (currentUser != null && !currentUser.emailVerified) {
      // 未验证，提示用户并可重新发送验证邮件
      setState(() {
        msg = "请先验证你的邮箱，已重新发送验证邮件";
      });
      await currentUser.sendEmailVerification();
      // 退出登录，让用户验证后再登录
      await FirebaseAuth.instance.signOut();
    } else {
      // 验证通过，跳转核心页面
      Navigator.pushAndRemoveUntil(
        context,
        MaterialPageRoute(builder: (context) => UsernameAndPhonenumber()),
        (route) => route.isFirst,
      );
    }
  } on FirebaseAuthException catch (e) {
    // 处理登录错误
  }
}

3. 额外优化建议 #

• 在Firebase控制台的Authentication > 设置中，开启"需要邮箱验证才能访问"（可选，更严格的控制）
• 监听用户状态变化，比如用FirebaseAuth.instance.userChanges()流，当用户完成验证后自动更新UI
• 提供"重新发送验证邮件"的按钮，处理邮件丢失或过期的情况

另外，你原代码中的if (userEmail == email)判断完全没用，因为Firebase返回的用户邮箱肯定和你输入的一致，直接删掉即可。

内容的提问来源于stack exchange，提问作者Abdlrhman Bashir