Fixed
Status Update
Comments
ph...@monzo.com <ph...@monzo.com> #2
sp...@google.com <sp...@google.com>
ap...@google.com <ap...@google.com> #3
Project: platform/frameworks/support
Branch: androidx-main
Author: Hao Dong <
Link:
Apply workaround of forcing strong bio to combined authenticators.
Expand for full commit details
Apply workaround of forcing strong bio to combined authenticators.
Bug: 257670132
Test: ./gradlew :biometric:biometric:test
Change-Id: Ibb8532b5210407cfb530020f67d77210f58cfbc7
Files:
- M
biometric/biometric/src/main/java/androidx/biometric/AuthenticatorUtils.java
- M
biometric/biometric/src/main/java/androidx/biometric/BiometricViewModel.java
Hash: 90159701331b69ec3d0977c37ca3600e1f08e41b
Date: Thu Mar 06 01:19:14 2025
sp...@google.com <sp...@google.com>
sp...@google.com <sp...@google.com>
sp...@google.com <sp...@google.com>
ap...@google.com <ap...@google.com> #4
Project: platform/frameworks/support
Branch: androidx-main
Author: Hao Dong <
Link:
Fix workaround of forcing strong biometrics
Expand for full commit details
Fix workaround of forcing strong biometrics
1. Use mPromptInfo.getAllowedAuthenticators() to decide whether to use
fake crypto object to force strong biometric, instead of the
consolidated authenticators.
2. Replace isStrongBiometricAllowed() with isAtLeastStrength().
Bug: 402158770
Bug: 257670132
Test: ./gradlew :biometric:biometric:test
Test: manually check b/402158770 on integration test app
Change-Id: I5cfb3b659781a1570ccd6aa607df3da61a559ebf
Files:
- M
biometric/biometric/src/main/java/androidx/biometric/AuthenticatorUtils.java
- M
biometric/biometric/src/main/java/androidx/biometric/BiometricManager.java
- M
biometric/biometric/src/main/java/androidx/biometric/BiometricViewModel.java
- M
biometric/biometric/src/test/java/androidx/biometric/AuthenticatorUtilsTest.java
Hash: cb2115ab72c5c98b53d26fb33a2c0bbc153d6aea
Date: Tue Mar 11 22:35:37 2025
Description
The workaround that forces strong biometrics on old devices without platform support for specifying the required strength of the authenticator is only applied when the authenticator is exactly
BIOMETRIC_STRONG
.It should also be applied when using
BIOMETRIC_STRONG | DEVICE_CREDENTIAL
.