Comments (2)
Comment by mice777
Saturday Apr 15, 2017 at 23:43 GMT
I think the workflow should be like this:
-
Letting user type password on devices without possibility to use fingerprint sensor:
-
If fingerprint sensor is usable, and there is no saved encrypted password, let user to enter password and optionally encrypt it afterwards:
After you have encrypt password, save the encrypted form for future use. -
If you have saved encrypted password, and fingerprint sensor is usable, let user either type password or use fingerprint to decrypt the saved password.
In all cases, the dialog would be there to obtain the password and return it to app, either directly typed or decrypted from saved copy. And you can't create new keys in keystore each time, otherwise your saved encrypted password would be invalidated.
from security-samples.
Thank you for the suggestions. The goal of the sample was to allow a developer to easily understand how to use the BiometricPrompt APIs, rather than showing a credible use case for it. We'll consider your input to see how we might improve it though. Thank you again.
from security-samples.
Related Issues (20)
- Attachment.PLATFORM cause RESULT_CANCELED
- lerning
- Get Which Biometric is used for authentication on Onsucesscallback
- Meizu crashed when using AndroidKeyStore HOT 1
- I face the crash in xiaomi10
- Fido auth with Android SDK. Error from a server: invalid origin HOT 3
- low level error 0x6a80(28) HOT 1
- Not getting any callback while the IRIS scanner failed to authenticate a user.
- crash in samsung HOT 2
- androidx.biometric.BiometricPrompt.authenticate no longer works on android versions < 30 HOT 1
- Getting crash upon registering a new fingerprint on device HOT 1
- Biometrics Support for Multiple Users in the app(Token Based)
- Fido app: Missing or invalid authentication
- Is defining asset_statements necessary?
- BiometricLoginKotlin: crash at Emulator API33 HOT 2
- Fido2 PIN
- Min SDK Version
- fido2 404 Not Found
- When upgrading AGP from version 7.2.2 to 7.3.1, the implementation I had for detecting if there was a change in the biometric (e.g. adding a new fingerprint) does not work. HOT 1
- Android enable android:directBootAware="true" and android:defaultToDeviceProtectedStorage="true" HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from security-samples.