[Story] PIN code blacklist and UI

[VolkerJunginger]

Story

As a user that is going to configure a pin code for my EX app I want to be sure that my pin code is safe so that I can sleep well at night ;)

General

• Each pin-code the user enters during setup must be checked against a blacklist of insecure pin codes like "0000".
• The blacklist must be configurable.
• The blacklist check only happens when setting up a new pin code. A once accepted code may never turn invalid later on because the blacklist has changed.

Userflow

• If the user enters a pin that is on the blacklist when setting up a new pin code the user will see an error telling them that the entered pin code is not allowed due to security reasons.
• The user can set up an other pin code next.

Dependencies

• None

Sign-offs

Android

• [ ] Design sign-off on completion
• [ ] QA sign-off on completion
• [ ] Product sign-off on completion

iOS

• [ ] Design sign-off on completion
• [ ] QA sign-off on completion
• [ ] Product sign-off on completion

Scope

### Android
- [x] Implementation

### iOS
- [x] Implementation

Out of scope

• None

[manuroe]

The blacklist must be configurable.

It is ok to have this list configured at build time ? This is the behavior of legacy apps).

[VolkerJunginger]

yes, it is ok to have this list configured at build time.

[amshakal]

Designs: Blacklist (iOS, Android)

[pixlwave]

yes, it is ok to have this list configured at build time.

Are we going to have a default list for our releases or are we leaving this empty for only forks?

[manuroe]

@pixlwave @ganfra we can start with an empty list. This is the current behavior of legacy apps. Let's see if @VolkerJunginger wants to change it later.

[pixlwave]

Can we start with just 0000 so it can at least be tested?

[manuroe]

No objection :D

[amshakal]

I think 0000 and 1234 will fall in it :D