cwa-documentation icon indicating copy to clipboard operation
cwa-documentation copied to clipboard

QR code recovery or more than once use.

Open niz11 opened this issue 3 years ago • 6 comments

The issue was already discussed, but was closed because of: "feature decision".

There must be a way to scan your QR code a second time. Either through some special PIN associated with the QR or through the users phone number: two steps authentication.

Why again?

  1. The user can easily lose access to his app for various reasons..
  2. QR code are usually not a one time use tool.
  3. Users who deleted their test for various reasons.

niz11 avatar Jul 20 '21 03:07 niz11

@niz11 Thanks for your contribution.

  1. I understand that you refer to PCR / RAT test QR codes?
  2. It is currently being investigated how to issue EU test DCC directly to the user (e.g. via email). Such EU DCC certificates (test, vaccination, recovery) can be scanned currently unlimited times and on several devices. This might change in future, i.e. there might be a check and a certificate might be deemed invalid for some reason (e.g. expired).

Corona-Warn-App Open Source Team

dsarkar avatar Jul 20 '21 09:07 dsarkar

see comment https://github.com/corona-warn-app/cwa-app-ios/issues/1198#issuecomment-883261628

dsarkar avatar Jul 20 '21 09:07 dsarkar

I thought about something like this: The user can makes the qrcode scannable again, if he deletes the qrcode from his device

jucktnich avatar Jul 20 '21 09:07 jucktnich

@jucktnich The problem I see is the following: If the user was positive and warned others he might do this again from another device. In order to avoid such a situation, if one implemented that a central server keeps track if a user deletes a QR code, so that it can be scanned again when deleted, we weaken bit by bit the decentralised approach.

Of course we will forward this wish-list item again, however, I personally think there is a good compromise already on its way with the EU certificates, which can be scanned unlimited times (unless maybe deemed invalid in a future version of the CWA).


Corona-Warn-App Open Source Team

dsarkar avatar Jul 20 '21 10:07 dsarkar

Ive finally had time to read the documentation and the easiest way would be to generate a qrcode with the registration token and delete it on the old device.

jucktnich avatar Jul 20 '21 12:07 jucktnich

It should be decided how to proceed here, either answer the question, close the issue as answered (in the comments above) or transform it to a feature request and move to the wishlist.

Ein-Tim avatar Apr 18 '22 13:04 Ein-Tim