fix: Bypass security auth by ActionReceiver

Author: deltazefiro

app/src/main/java/deltazero/amarok/QuickHideService.java

@@ -22,7 +22,6 @@
 import com.hjq.window.EasyWindow;
 import com.hjq.window.draggable.SpringDraggable;
 
-import deltazero.amarok.receivers.ActionReceiver;
 import deltazero.amarok.ui.MainActivity;
 
 public class QuickHideService extends LifecycleService {
@@ -31,7 +30,6 @@ public class QuickHideService extends LifecycleService {
     private ImageView ivPanicButton;
 
     private PendingIntent activityPendingIntent;
-    private NotificationCompat.Action action;
     private static final String CHANNEL_ID = "QUICK_HIDE_CHANNEL";
     private static final int NOTIFICATION_ID = 1;
 
@@ -46,14 +44,6 @@ public void onCreate() {
                 getString(R.string.notification_channel_name), NotificationManager.IMPORTANCE_DEFAULT);
         getSystemService(NotificationManager.class).createNotificationChannel(channel);
 
-        Intent actionIntent = new Intent(this, ActionReceiver.class);
-        actionIntent.setAction("deltazero.amarok.HIDE");
-        PendingIntent actionPendingIntent = PendingIntent.getBroadcast(this, 1,
-                actionIntent, PendingIntent.FLAG_IMMUTABLE);
-        action = new NotificationCompat.Action.Builder(
-                R.drawable.ic_paw,
-                getString(R.string.hide), actionPendingIntent).build();
-
         activityPendingIntent = PendingIntent.getActivity(this, 0,
                 new Intent(this, MainActivity.class), PendingIntent.FLAG_IMMUTABLE);
 
@@ -79,7 +69,6 @@ public int onStartCommand(Intent intent, int flags, int startId) {
                         .setSmallIcon(R.drawable.ic_paw)
                         .setContentIntent(activityPendingIntent)
                         .setOngoing(true)
-                        .addAction(action)
                         .build();
 
         if (Build.VERSION.SDK_INT >= 34) {

app/src/main/java/deltazero/amarok/receivers/ActionReceiver.java

@@ -10,6 +10,8 @@
 
 import deltazero.amarok.Hider;
 import deltazero.amarok.R;
+import deltazero.amarok.ui.SecurityAuthForQSActivity;
+import deltazero.amarok.utils.SecurityUtil;
 
 public class ActionReceiver extends BroadcastReceiver {
     @Override
@@ -24,7 +26,10 @@ public void onReceive(Context context, Intent intent) {
         if (Objects.equals(intent.getAction(), "deltazero.amarok.HIDE")) {
             Hider.hide(context);
         } else if (Objects.equals(intent.getAction(), "deltazero.amarok.UNHIDE")) {
-            Hider.unhide(context);
+            if (SecurityUtil.isUnlockRequired())
+                context.startActivity(new Intent(context, SecurityAuthForQSActivity.class)
+                        .addFlags(Intent.FLAG_ACTIVITY_NEW_TASK));
+            else Hider.unhide(context);
         } else {
             Log.w("ActionReceiver", "Invalid action: " + intent.getAction());
             Toast.makeText(context, context.getString(R.string.invalid_action, intent.getAction()),