search

EddyVerbruggen / nativescript-fingerprint-auth

:nail_care: 👱‍♂️ Forget passwords, use a fingerprint scanner or facial recognition!
MIT License
134 stars 33 forks source link

Android "verifyFingerprint" can be bypassed when setting "useCustomAndroidUI" to "true" #29

Closed rickywong-arbaholdings closed 6 years ago

rickywong-arbaholdings commented 6 years ago

"verifyFingerprint" can be bypassed when setting "useCustomAndroidUI" to "true"

Steps to reproduce:

  1. Have the Custom Android UI on screen
  2. Click "USE PASSWORD"
  3. Input incorrect password
  4. resolve as success

P.S. No issue when not using "useCustomAndroidUI"

FYR

EddyVerbruggen commented 6 years ago

Thanks! See #35.