Design issues of this sample about security-samples HOT 2 CLOSED

Comment by mice777
Saturday Apr 15, 2017 at 23:43 GMT

I think the workflow should be like this:

1. Letting user type password on devices without possibility to use fingerprint sensor:
   

2. If fingerprint sensor is usable, and there is no saved encrypted password, let user to enter password and optionally encrypt it afterwards:
   
   After you have encrypt password, save the encrypted form for future use.

3. If you have saved encrypted password, and fingerprint sensor is usable, let user either type password or use fingerprint to decrypt the saved password.
   

In all cases, the dialog would be there to obtain the password and return it to app, either directly typed or decrypted from saved copy. And you can't create new keys in keystore each time, otherwise your saved encrypted password would be invalidated.

from security-samples.

Thank you for the suggestions. The goal of the sample was to allow a developer to easily understand how to use the BiometricPrompt APIs, rather than showing a credible use case for it. We'll consider your input to see how we might improve it though. Thank you again.

from security-samples.