xl-authenticator icon indicating copy to clipboard operation
xl-authenticator copied to clipboard

Add safety mechanism to auto-close feature

Open aekobear opened this issue 2 years ago • 1 comments

The "auto-close app after sending code" feature can be super dangerous. Once activated, it's practically impossible to see the TOTP code before the app closes. There's no way to access app settings to turn it off once it's turned on

TOTP is necessary for accessing secure.square-enix and mog station, so if the user hasn't set up a second TOTP app with the same code, toggling this checkbox could lock them out of their account

Consider implementing a way to access the code or settings even when this option is enabled (android supports custom app menus on long hold)

Failing that, even an in-app warning that users must have a separate app installed before enabling this option would be super helpfull

aekobear avatar Jan 07 '24 16:01 aekobear

The auto-close feature should only happen after XL-Auth successfully sends the code (read: accepted by XIVLauncher, logging you into the game). If that is not the case, that is a different issue.

tommadness avatar Jan 07 '24 17:01 tommadness