Since not all the Android devices provide fingerprint scanner and even some that do, are not setup by the device owner, would it be interesting to provide an out of the box fallback functionality that would use the smart lock authentication instead?
A possible flow would be as follows:
1) Check for fingerprint support
2) Check for fingerprint enrolled
1) If enrolled use it for accessing the KeyStore
2) else use PIN/pattern/password auth for accessing the KeyStore
I understand that without fingerprint the authenticated device holder is granting access to all the keys for a period of time, instead of having specific key bound to the fingerprint authentication, but as I said it's a fallback.
Is it something you would consider introducing to this library @Mauin?
Hey there,
Since not all the Android devices provide fingerprint scanner and even some that do, are not setup by the device owner, would it be interesting to provide an out of the box fallback functionality that would use the smart lock authentication instead?
A possible flow would be as follows: 1) Check for fingerprint support 2) Check for fingerprint enrolled 1) If enrolled use it for accessing the KeyStore 2) else use PIN/pattern/password auth for accessing the KeyStore
I understand that without fingerprint the authenticated device holder is granting access to all the keys for a period of time, instead of having specific key bound to the fingerprint authentication, but as I said it's a fallback.
Is it something you would consider introducing to this library @Mauin?
Thanks