orbot icon indicating copy to clipboard operation
orbot copied to clipboard

Orbot Authentication Corner Cases and Bug Fixes

Open bitmold opened this issue 6 months ago • 10 comments

  • Fixes #1325 where the password lock would crash on APIs lower than 30. This is done by forcing biometrics OR password for those devices
  • Nougat, and some other older Androids, would enter a loop with the old code for prompting authentication (once the aforementioned crash was fixed). This fixes #1340
  • Adds a preference on API >= 30 to disallow biometrics, forcing user to only use password
  • Fixes some edge cases where user has no authentication setup
  • Updates UI to be focused more on "Authentication" instead of passwords since biometrics are also now enabled.

bitmold avatar Jun 17 '25 00:06 bitmold

Answered this off thread, but yes there is no case of the user being locked out of the app forever. If they disable their device passcode and then continue to use Orbot with this feature enabled Orbot will just display a Toast saying please set a passcode in order to use the authentication feature

bitmold avatar Jun 17 '25 16:06 bitmold

When I open Orbot and get the authentication screen and select "Cancel", then the next time I open Orbot, the authentication screen is not displayed and I can enter Orbot with no authentication.

syphyr avatar Jun 17 '25 19:06 syphyr

Good catch, fixing now

bitmold avatar Jun 17 '25 20:06 bitmold

I can't reproduce on Nougat which actually has a cancel button, or on Android 34 which does not. What version are you using?

bitmold avatar Jun 17 '25 20:06 bitmold

I can't reproduce on Nougat which actually has a cancel button, or on Android 34 which does not. What version are you using?

I am testing with Nougat using a pattern lock.

syphyr avatar Jun 17 '25 20:06 syphyr

Thanks for looking, based on the logic I suspect this should fix it, but I'm still unable to reproduce it :woman_shrugging:

bitmold avatar Jun 17 '25 20:06 bitmold

Thanks for looking, based on the logic I suspect this should fix it, but I'm still unable to reproduce it 🤷‍♀️

Its fixed now, thanks!.

syphyr avatar Jun 17 '25 20:06 syphyr

@tladesignz when you have the time, this is ready

bitmold avatar Jun 18 '25 16:06 bitmold

There's a pending change...

tladesignz avatar Jun 18 '25 16:06 tladesignz

Oh my mistake, I had commented on my phone and didn't realize that this became no longer mergeable after I added a string resource last night. Taken care of.

bitmold avatar Jun 18 '25 19:06 bitmold

@tladesignz just did the method rename that I had missed

bitmold avatar Jun 29 '25 16:06 bitmold

Merging because only pending change was a method rename, and to get new string resources added to localization service.

bitmold avatar Jun 29 '25 16:06 bitmold