search

goaaats / xl-authenticator

Android/iOS OTP authenticator app for XIVLauncher built in Flutter
GNU General Public License v3.0
38 stars 12 forks source link

Option to require biometrics before revealing/sending to XL the OTP code #15

Open Berna-L opened 2 years ago

Berna-L commented 2 years ago

For better security, could there be an option for the auth app to require the user to authenticate themselves using the device's biometrics (fingerprint, Touch/Face ID etc.) when opened, and only after and if it's successful the app reveals the OTP code or transmits it to XIV Launcher?

The flow would be basically: user opens app -> app requests OS for the user to authenticate themselves using biometrics -> user authenticates -> app unlocks

And for failure: user opens app -> app requests OS for the user to authenticate themselves using biometrics -> user fails to authenticate -> app offers a button to try again

Berna-L commented 1 year ago

Grabbing this.