Security News
tea.xyz Spam Plagues npm and RubyGems Package Registries
Tea.xyz, a crypto project aimed at rewarding open source contributions, is once again facing backlash due to an influx of spam packages flooding public package registries.
cordova-plugin-biometric-keychain
Advanced tools
Readme
A cordova plugin adding the iOS TouchID and FaceID / Android fingerprint to your app and allowing you to store a password securely in the device keychain with detect change when any new fingerprint or touchId added or removed from your device
The latest, from the master repo:
$ cordova plugin add cordova-plugin-biometric-keychain
touchid.js is brought in automatically. There is no need to change or add anything in your html.
Download the source files and copy them to your project.
iOS: Copy the four .h
and two .m
files to platforms/ios/<ProjectName>/Plugins
Cordova plugin for interacting with iOS touchId and keychain
Make sure you check if the plugin is installed
if (window.plugins.touchid) {
}
Call the function you like
isAvailable(successCallback, errorCallback(msg)) will Check if touchid is available on the used device
save(key,password, successCallback, errorCallback(msg)) will save a password under the key in the device keychain, which can be retrieved using a fingerprint
verify(key,message,successCallback(password), errorCallback(errorCode)) will open the fingerprint dialog, for the given key, showing an additional message. successCallback will return the password stored in key chain. errorCallback will return the error code, where -1 indicated not available.
has(key,successCallback, errorCallback) will check if there is a password stored within the keychain for the given key
delete(key,successCallback, errorCallback) will delete the password stored under given key from the keychain
didFingerprintDatabaseChange(successCallback, errorCallback) will check if there a new fingerprint or touchid added or removed for your device
When a new fingerprint is enrolled, no more fingerprints are enrolled, secure lock screen is disabled or forcibly reset, the key which is used to hash the password is permanently invalidated. It cannot be used anymore.
verify
and save
functions will return the "KeyPermanentlyInvalidatedException"
message in the error callback.
This invalid key is removed - user needs to save their password again.
if (window.plugins) {
window.plugins.touchid.isAvailable(function() {
window.plugins.touchid.has("MyKey", function() {
alert("Touch ID avaialble and Password key available");
}, function()
{
alert("Touch ID available but no Password Key available");
});
}, function(msg)
{
alert("no Touch ID available");
});
}
if (window.plugins) {
window.plugins.touchid.verify("MyKey", "My Message", function(password) {
alert("Tocuh " + password);
});
}
if (window.plugins) {
window.plugins.touchid.save("MyKey", "My Password", function() {
alert("Password saved");
});
}
if (window.plugins) {
window.plugins.touchid.delete("MyKey", function() {
alert("Password key deleted");
});
}
if(window.plugins)
{
window.plugins.touchid.didFingerprintDatabaseChange(function(changed) {
if(changed)
{
alert("fingerprint changed");
}
});
}
FAQs
Scan the fingerprint of your user with the TouchID or FaceID sensor (iPhone 5S, iPhone 6(S), ..) and control a key in the Keychain and detect if any TouchID or fingerprint is added or removed for security reason
The npm package cordova-plugin-biometric-keychain receives a total of 44 weekly downloads. As such, cordova-plugin-biometric-keychain popularity was classified as not popular.
We found that cordova-plugin-biometric-keychain demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Tea.xyz, a crypto project aimed at rewarding open source contributions, is once again facing backlash due to an influx of spam packages flooding public package registries.
Security News
As cyber threats become more autonomous, AI-powered defenses are crucial for businesses to stay ahead of attackers who can exploit software vulnerabilities at scale.
Security News
UnitedHealth Group disclosed that the ransomware attack on Change Healthcare compromised protected health information for millions in the U.S., with estimated costs to the company expected to reach $1 billion.