react-native-touch-id icon indicating copy to clipboard operation
react-native-touch-id copied to clipboard

Android New Fingerprint Added

Open cvlehe opened this issue 6 years ago • 4 comments

I don't see a way to detect if the user has added a new fingerprint to the device since logging in. This is a potential security issue as anyone can access a previously logged in account by adding a new fingerprint to the device.

cvlehe avatar Oct 24 '18 19:10 cvlehe

@cvlehe did you manage to solve this issue?

tonmanayo avatar Oct 25 '18 11:10 tonmanayo

You basically need to fork the repo and modify react-native-touch-id to pass back an error saying there was a new fingerprint enrolled. I'm going to submit a PR in the next couple of days with this feature.

cvlehe avatar Oct 30 '18 02:10 cvlehe

Thanks!

zibs avatar Oct 30 '18 15:10 zibs

I don't think that will solve the issue. You need to return some kinda ID that is linked with the finger print and save it with the users profile. At moment it only returns true

tonmanayo avatar Oct 30 '18 15:10 tonmanayo