search

AgoraDesk-LocalMonero / agoradesk-app-foss

Source code for the AgoraDesk/LocalMonero Mobile Applications. https://agoradesk.com
Apache License 2.0
138 stars 18 forks source link

[BUG] Android: able to open trade chat without PIN #131

Closed davidbtc2009 closed 1 year ago

davidbtc2009 commented 1 year ago

This is on the FOSS app but may affect others too. If you open the app and the foreground service message saying "LocalMonero Notification Service Checking for notifications. tap to read more" appears in the status bar. Then swipe the app away and get a trade chat you can tap the trade chat and talk with the other person without requiring the app PIN. If you try to exit the chat the PIN is required, but you shouldnt be able to open the chat at all without PIN first as it would contain sensative info.

sergdeus commented 1 year ago

Hi! Thank you for reporting this issue. I've checked - this is a FOSS version bug. Fixing.

sergdeus commented 1 year ago

Fixed, please check, new release is ready.