如何处理FirebaseUI中的FirebaseAuthUserCollisionException异常？

问题描述 #

在基于Jetpack Compose的Android应用中，使用FirebaseUI实现了Google、Facebook和Email三种认证方式，通过rememberLauncherForActivityResult启动登录意图，正常认证流程运行正常。但当使用此前通过Gmail认证过的同一邮箱尝试Facebook登录时，抛出以下异常：

A sign-in error occurred.
com.google.firebase.auth.FirebaseAuthUserCollisionException: This credential is already associated with a different user account.**
at com.google.android.gms.internal.firebase-auth-api.zzxc.zzb(com.google.firebase:firebase-auth@@21.1.0:4)
at com.google.android.gms.internal.firebase-auth-api.zzya.zza(com.google.firebase:firebase-auth@@21.1.0:7)
at com.google.android.gms.internal.firebase-auth-api.zzyb.zzl(com.google.firebase:firebase-auth@@21.1.0:1)
at com.google.android.gms.internal.firebase-auth-api.zzxy.zzq(com.google.firebase:firebase-auth@@21.1.0:3)
at com.google.android.gms.internal.firebase-auth-api.zzxy.zze(com.google.firebase:firebase-auth@@21.1.0:1)
at com.google.android.gms.internal.firebase-auth-api.zzxa.zze(com.google.firebase:firebase-auth@@21.1.0:1)
at com.google.android.gms.internal.firebase-auth-api.zzvf.zzd(com.google.firebase:firebase-auth@@21.1.0:8)
at com.google.android.gms.internal.firebase-auth-api.zzuf.zzb(com.google.firebase:firebase-auth@@21.1.0:2)
at com.google.android.gms.internal.firebase-auth-api.zzyj.zzb(com.google.firebase:firebase-auth@@21.1.0:12)
at com.google.android.gms.internal.firebase-auth-api.zzyj.zza(com.google.firebase:firebase-auth@@21.1.0:14)
at com.google.android.gms.internal.firebase-auth-api.zzxp.zzq(com.google.firebase:firebase-auth@@21.1.0:4)
at com.google.android.gms.internal.firebase-auth-api.zzug.zzb(com.google.firebase:firebase-auth@@21.1.0:4)
at com.google.android.gms.internal.firebase-auth-api.zzvf.zzM(com.google.firebase:firebase-auth@@21.1.0:5)
at com.google.android.gms.internal.firebase-auth-api.zzvf.zzs(com.google.firebase:firebase-auth@@21.1.0:4)
at com.google.android.gms.internal.firebase-auth-api.zzxb.zzm(com.google.firebase:firebase-auth@@21.1.0:6)
at com.google.android.gms.internal.firebase-auth-api.zzvr.zzc(com.google.firebase:firebase-auth@@21.1.0:1)
at com.google.android.gms.internal.firebase-auth-api.zzyc.run(com.google.firebase:firebase-auth@@21.1.0:1)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1137)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:637)
at java.lang.Thread.run(Thread.java:1012)

当前实现代码如下：

ProfileViewModel.kt #

override fun buildLoginIntent(): Intent {

    val authUILayout = AuthMethodPickerLayout.Builder(R.layout.auth_ui)
        .setGoogleButtonId(R.id.btn_gmail)
        .setEmailButtonId(R.id.btn_email)
        .setFacebookButtonId(R.id.btn_facebook)
        .build()


    val googleScopes = arrayListOf(
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email"
    )

    val intent = AuthUI.getInstance().createSignInIntentBuilder()
        .setAvailableProviders(
            listOf(
                AuthUI.IdpConfig.EmailBuilder().build(),
                AuthUI.IdpConfig.GoogleBuilder().setScopes(googleScopes).build(),
                AuthUI.IdpConfig.FacebookBuilder().build()
            )
        )
        .enableAnonymousUsersAutoUpgrade()
        .setLogo(R.mipmap.ic_launcher)
        .setAuthMethodPickerLayout(authUILayout)
        .build()


    return intent
}


@SuppressLint("RestrictedApi")
override fun onLoginResult(result: FirebaseAuthUIAuthenticationResult) {

// Handle result

}

ProfileUI.kt #

val loginLauncher = rememberLauncherForActivityResult(
    profileViewModel.buildLoginActivityResult()
) { result ->

    if (result != null) {
        profileViewModel.onLoginResult(result = result)
    }
}

if (isAnonymousUser) {
    SignInUI() {
            loginLauncher.launch(profileViewModel.buildLoginIntent())
    }
} 

异常原因 #

该异常触发的核心原因是：Firebase Auth检测到同一个邮箱地址被绑定到了两个独立的用户账号（一个通过Google认证创建，另一个是此次Facebook登录尝试创建的），默认机制下不允许这种账号冲突。

处理方案 #

1. 捕获并识别冲突异常 #

在onLoginResult方法中，先判断登录结果是否失败，再识别具体的异常类型：

@SuppressLint("RestrictedApi")
override fun onLoginResult(result: FirebaseAuthUIAuthenticationResult) {
    val idpResponse = result.idpResponse
    if (result.resultCode == Activity.RESULT_OK) {
        // 登录成功后的逻辑处理
        val user = FirebaseAuth.getInstance().currentUser
        // 更新用户信息、跳转页面等操作
    } else {
        val exception = idpResponse?.error
        if (exception is FirebaseAuthUserCollisionException) {
            // 处理账号冲突逻辑
            mergeUserAccounts(exception)
        } else {
            // 其他登录失败场景处理，比如提示用户登录失败
        }
    }
}

2. 合并冲突的账号 #

当检测到FirebaseAuthUserCollisionException时，我们可以通过异常对象获取待关联的凭证，将其与当前已登录的账号合并：

private fun mergeUserAccounts(exception: FirebaseAuthUserCollisionException) {
    val pendingCredential = exception.credential
    val currentUser = FirebaseAuth.getInstance().currentUser

    currentUser?.linkWithCredential(pendingCredential)
        ?.addOnCompleteListener { task ->
            if (task.isSuccessful) {
                // 账号合并成功，用户现在可以用Google/Facebook两种方式登录同一个账号
                val mergedUser = task.result?.user
                // 这里可以更新本地用户状态、通知UI刷新等
            } else {
                // 合并失败，处理错误，比如提示用户合并失败
                val mergeError = task.exception
                // 错误提示逻辑
            }
        }
}

注意事项 #

• 如果当前用户是匿名账号，enableAnonymousUsersAutoUpgrade()会自动将匿名账号升级为已认证账号，但这种机制不适用于已存在的两个第三方认证账号冲突的场景，仍需手动处理合并。
• 账号合并后，两个认证方式都会绑定到同一个Firebase用户ID下，后续用户用任意一种方式登录都会进入同一个账号。

内容的提问来源于stack exchange，提问作者Babloo K