Comments (3)
The clientSecret is used to generate the encryption token that is returned upon successful fingerprint authentication.
return mCipher.doFinal(mClientSecret.getBytes());
Yes, the client secret should be passed in at runtime when compiling your application. This is a plugin that can be used by several frameworks, not all of which I have experience with, so I can not really provide recommendations for them all.
I use this plugin with the MeteorJS framework. When building for production I pass in a settings.json file that contains all my API credentials. These are only available via process.env so they would not be able to be harvested from the application bundle.
What framework are you using this plugin with?
from cordova-plugin-android-fingerprint-auth.
I'm using just HTML5 and JavaScript with Phonegap / Cordova. No frameworks (yet). At the moment, I'm not sure how to accomplish passing something in at runtime and not bundled with the app -- besides making an AJAX call out to another system.
Thanks for the information!
from cordova-plugin-android-fingerprint-auth.
Is not unsafe to place the encryption key inside js files? they can be easily decoded. In .class is better but I think that until the whole archive is encrypted the key is not safe
from cordova-plugin-android-fingerprint-auth.
Related Issues (20)
- Fingerprint popup box out of place on Samsung Galaxy S10+
- Gui translations are not applied. English is only language. HOT 1
- android.content.res.Resources$NotFoundException HOT 4
- FingerprintAuth is not defined HOT 1
- android.content.res.Resources$NotFoundException: HOT 1
- FaceID on new mobile devices HOT 1
- isAvailableSuccess response, what das it means? HOT 3
- Fatal Exception: java.lang.IllegalStateException: IV has already been used. Reusing IV in encryption mode violates security best practices.
- Multi-access HOT 3
- Deprecated FingerprintManager in API level 28 HOT 6
- BAD_PADDING_EXCEPTION after reinstall HOT 3
- A question about multiple users HOT 3
- Attempt to invoke virtual method HOT 2
- Cannot dismiss Fingerprint dialog HOT 1
- [IONIC] "Uncaught TypeError: object is not a function"
- Uses encryption mode CBC with PKCS7 padding
- setUserAuthenticationRequired true to false update not supporting Backup flow HOT 1
- Add support for newer android sdk's (starting from sdk 28).
- 请问encryptConfig中的clientId如何获取,可否提供操作步骤?
- BSF Cordova Ecosystem Crowdfunding Plan
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cordova-plugin-android-fingerprint-auth.