search

sjhoeksma / cordova-plugin-keychain-touch-id

Touch ID plugin with saving password in keychain for IOS and android
87 stars 160 forks source link

Face Touch Id veritification on android #68

Open symeonmattes opened 4 years ago

symeonmattes commented 4 years ago

I'm using the plugin for login. The basic idea is:

  1. When the user tries to login for the first time the password is stored by using this.keychainAuthService.saveIntoKeyChain("mykey", password).
  2. Then when the user tries to login again then the touchid/faceid alert appears and if the fingerprint is correct the password is restored with this.keychainAuthService.getFromKeyChain.

The problem is on this.keychainAuthService.saveIntoKeyChain in android devices (not ios). I suppose for security purposes it asks again the user to use touch (fingerprint) in order to allow to store the password.

In order to avoid this I have found in https://github.com/sjhoeksma/cordova-plugin-keychain-touch-id/blob/master/www/touchid.js: userAuthenticationRequired if true will save after authentication with fingerprint, if false there's no need to authenticate to save.

In versions that have been released, i.e. through "cordova plugin add cordova-plugin-keychain-touch-id", the latest is 3.2.1, it doesn't have this functionality.

Is there any reason why it's not officially released?