signum-network / signum-mobile-wallet Goto Github PK

As builds will go through Expo EAS Build
We may consider at least running "ts:check": "tsc" for checking types before commit/push changes

Detect devices with strong biometric authentication
https://docs.expo.dev/versions/latest/sdk/local-authentication/#securitylevel

This feature allow us to detect if user can save the private keys with PIN or Biometric devices (e.g. TouchID, FaceID, Fingerprint, etc...)

• Initial UI
• Validation with #14

As project is open-source
setting up sonar cloud would be handy
https://www.sonarsource.com/products/sonarcloud/

Develop the account management related features
(This group of screens will allow the user to Create Import signum accounts)

To discuss

• #13

Stories:

• #7
• #8
• #9
• #14
• #15
• #10
• #11
• #12

• Initial UI
• Passphrase creation service
• Form validation on user agreeing to the terms
• After creation, store user's keys on the Private Keys Storage service

Screens (reference):

As previously brainstormed, this is our new proposal for storing the user's keys on the device's keychain

The following modules are required:

• Set up initial Expo SecureStore service
• Store keys through PIN
• Store keys through Biometric authentication

• Initial UI
• Form validation on user agreeing to the terms
• Import Mnemonic or Watch-only accounts
• After importing a full mnemonic account, store the keys on the Private Keys Storage service
• After importing a watch-only account, store the account ID on the Account Storage service

Develop the welcome screen with all its required modules.
(This screen asks the users to read and accept the terms before using the wallet)

• #3
• #4
• #5

Rate limit the amount of failed attempts to authenticate with PIN

@TheTimeWalker @ohager
1- How many attempts to enter the PIN the app should allow?
2- What the app should do after the limit is reached?

If user previously agreed, redirect them to the account wizard screen

• Allow the user to accept terms
• Verify user has agreed to all terms

@ohager @TheTimeWalker
As Expo SecureStore is using the device's keychain, it is a Key/Value DB.

It does not provide a method of knowing all keys which are saved on the device. The app must keep track of all accounts the user is importing/creating

Proposal:
The app should be able to identify all the account the user has created or imported through SQLite

We can create the following table called Account:

Any feedback is appreciated