Require login after app returns from background: let user choose if app is locked immediately or after some time

[myxmaster]

Describe the feature

For general security it is a good idea to let Zeus lock itself (PIN/Biometrics required to open it) when Zeus was in background. But it happens quite often that you just want to copy something from elsewhere and paste it somewhere in Zeus. To make this more convenient, it would be nice if you could configure a time after which Zeus will lock itself, when sent to background.

Android (at least Samsung) has this too (when turning off screen, not screen timeout!): user can choose between immediately, 5/15/30 seconds, 1/2/5/10/30 minutes. So maybe UI could be similar to this.

[kaloudis]

let's do it. shouldn't be a big lift

[myxmaster]

The PR must be reverted because it does not work on Android (Android probably stops the timer due to aggressive power management).

There are theoretically three other ways of implementing this which come into my mind:

1. Save the current timestamp when going to background and compare the new current timestamp when the app is opened again with the saved timestamp to check if the timeout is elapsed. The problem here is that this can be tricked by changing the device system time.
2. Use the device uptime/boot time instead of the current timestamp and use the same approach as above. This would work, but I did not find a library with acceptable quality.

• react-native-elapsed-realtime is old (would need another patch to fix build.gradle and does not use AndroidX) and has lots of unnecessary/unused content like resource files (looks unprofessional). react-native-elapsed-realtime-v1 seems to be just a clone.
• react-native-uptime does not provide the system uptime but some performance data.
• react-native-device-uptime uses an unsuitable method for iOS according to this issue.

3. Get the time from a time server. Obviously can't be manipulated but we would be depending on a central server. And also it would not work if there is no internet connection.

If somebody has another idea, please share. I would really like to implement this feature because I think it would improve security since people right now will use less secure passwords/PINs or biometrics or even disable app lock when going to background because they have to unlock the app so often.