--- title: "Firebase Auth initialization handles invalidated users selectively: 2026-10-21 | Harbyn" description: "Firebase Auth initialization handles invalidated users selectively, announced Oct 21, 2026." canonical: "https://harbyn.com/changes/firebase/2026-10-21-auth-initialization-handles-invalidated-users-selectively" last-updated: 2026-10-25 --- # Firebase Auth initialization handles invalidated users selectively Markdown version of . Behavior change - Firebase. low severity. In effect. Firebase JS SDK 13.1.0 preserves the persisted user session across transient server errors such as HTTP 5xx UNAVAILABLE during Auth initialization. It clears the session only when initial reload fails with auth/user-token-expired or auth/user-disabled. ## Facts | Fact | Value | | --- | --- | | Vendor | [Firebase](https://harbyn.com/vendors/firebase.md) | | Kind | Behavior change | | Severity | low | | Status | In effect | | Announced | Oct 21, 2026 | | Added to Harbyn | Oct 25, 2026 | | Lead time | No dated deadline | | Symbols | `auth/user-token-expired`, `auth/user-disabled` | | Review | Reviewed by a person, extracted by a model | ## Find it in your code ```sh npx harbyn scan ``` This change names no identifier the scanner can match line by line, so the scan tells you whether your repository uses Firebase, from its packages and API hosts. Nothing leaves your machine. ## Sources Where this event comes from: the page we read, when we read it, and the hash of that snapshot. - (changelog, fetched 2026-10-22 03:34 UTC, sha256 `399b24d667d1072030092625daa6b2f31b1b814f956b5777da50ec86846de78d`) ## Related changes ### More from Firebase - [Firebase CLI v15.34.1 updates command behavior](https://harbyn.com/changes/firebase/2026-10-22-firebase-cli-v15-34-1-updates-command-behavior.md) (Behavior change, announced Oct 22, 2026) - [Legacy Vertex AI initialization syntax removed from Firebase AI Logic SDKs](https://harbyn.com/changes/firebase/2026-10-15-legacy-vertex-ai-initialization-syntax-removed-from-firebase-ai-logic-sdks.md) (Breaking change, effective Oct 15, 2026) - [AI Logic in JavaScript SDK 13.0.0 exports ChatSession as an interface, not a class](https://harbyn.com/changes/firebase/2026-10-07-chatsession-class-replaced-by-interface.md) (Breaking change, announced Oct 7, 2026) - [AI Logic in JavaScript SDK 13.0.0 makes gemini-3.5-flash-lite the default hybrid in-cloud model](https://harbyn.com/changes/firebase/2026-10-07-default-hybrid-in-cloud-model-changed.md) (Behavior change, announced Oct 7, 2026) ### Changes at other vendors - [Amazon Selling Partner API: ORDER\_CHANGE notifications add PreFulfillmentStatusChange for Amazon Autos](https://harbyn.com/changes/amazon-sp-api/2026-10-14-sp-api-updates-new-listings-items-api-ivp-values-in-eu5-jp-and-ca-stores-oct-3.md) (effective Oct 28, 2026) - [BigCommerce: 301 redirects will apply only to storefront channels](https://harbyn.com/changes/bigcommerce/2026-10-07-301-redirects-now-apply-to-storefront-channels-only.md) (effective Nov 10, 2026) - [GitHub: Secret scanning audit log business field changes to enterprise slug](https://harbyn.com/changes/github/2026-10-20-updates-to-github-secret-scanning-7.md) (effective Nov 12, 2026) - [Jira / Atlassian Cloud: New IP address ranges in use from January 1, 2027](https://harbyn.com/changes/atlassian-jira/2026-10-16-atlassian-cloud-adds-new-ip-address-ranges.md) (effective Jan 1, 2027) [All upcoming deadlines](https://harbyn.com/deadlines.md)