Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

use setUserAuthenticationParameters for android >= 11 #613

Merged

Conversation

AntoineThibi
Copy link
Contributor

Fix for Android >= 11 to force the use of biometry if required : an attacker could bypass the use of biometry by unlocking the device with the pin and then could access the keychain, even though we would like it to be protected with the biometry.

Fix coming from a comment on this PR : #592

It should solve for Android >=11 the issues :

However, it does not solve the issue for Android < 11 due to the way the keychain is implemented on Android.

@PAN740623
Copy link

固定

@androideveloper androideveloper merged commit 94fb6bf into oblador:master Feb 14, 2024
3 checks passed
renovate bot added a commit to valora-inc/wallet that referenced this pull request Feb 21, 2024
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[react-native-keychain](https://togithub.com/oblador/react-native-keychain)
| [`^8.1.2` ->
`^8.1.3`](https://renovatebot.com/diffs/npm/react-native-keychain/8.1.2/8.1.3)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/react-native-keychain/8.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/react-native-keychain/8.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/react-native-keychain/8.1.2/8.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/react-native-keychain/8.1.2/8.1.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>oblador/react-native-keychain (react-native-keychain)</summary>

###
[`v8.1.3`](https://togithub.com/oblador/react-native-keychain/releases/tag/v8.1.3)

[Compare
Source](https://togithub.com/oblador/react-native-keychain/compare/v8.1.2...v8.1.3)

#### What's Changed

- use setUserAuthenticationParameters for android >= 11 by
[@&#8203;AntoineThibi](https://togithub.com/AntoineThibi) in
[oblador/react-native-keychain#613
- \[Fix]\[Android] Bugfix for lambda functions not workin in older
projects. by
[@&#8203;sohail-shrestha](https://togithub.com/sohail-shrestha) in
[oblador/react-native-keychain#585
- \[Fix]\[Android] Unsupported RSA key size for StrongBox by
[@&#8203;frw](https://togithub.com/frw) in
[oblador/react-native-keychain#577

#### New Contributors

- [@&#8203;AntoineThibi](https://togithub.com/AntoineThibi) made their
first contribution in
[oblador/react-native-keychain#613
- [@&#8203;sohail-shrestha](https://togithub.com/sohail-shrestha) made
their first contribution in
[oblador/react-native-keychain#585
- [@&#8203;frw](https://togithub.com/frw) made their first contribution
in
[oblador/react-native-keychain#577

**Full Changelog**:
oblador/react-native-keychain@v8.1.2...v8.1.3

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "after 5pm,every weekend" in timezone
America/Los_Angeles, Automerge - "after 5pm,every weekend" in timezone
America/Los_Angeles.

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/valora-inc/wallet).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yMDAuMCIsInVwZGF0ZWRJblZlciI6IjM3LjIwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: valora-bot <valorabot@valoraapp.com>
@renchap
Copy link

renchap commented Apr 8, 2024

This seems to be causing issues on Android, where start times are up by 8-20 seconds and even sometimes cause ANRs , see #630

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants