EdgeApp / airbitz-android-gui

35 stars 29 forks source link

UI rejects valid password when creating password recovery questions #9

Open happybeing opened 8 years ago

happybeing commented 8 years ago

This is with the Android wallet downloaded yesterday from Google Play.

The problem is presumably triggered by the session expiring during the setting of recovery questions.

I was creating my recovery questions for the first time in a brand new wallet, and didn't comlete them for some time, having been interrupted I left the wallet open at that page. Over an hour later I returned to complete the page, and it was rejecting my password, saying it wasn't correct when in fact it was (though it had me worried!). This would be much more concerning for someone who had stored value in the wallet of course.

When I came out of the wallet and logged in again, I then went to create my recovery questions, and it of course accepted my password.

So you just need to detect the session has expired and make sure people are not left in an area where they'll be told their password is incorrect, when in fact it is correct.