
Research
SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.
cordova-plugin-touchid
Advanced tools
Cordova Plugin to leverage the iOS local authentication framework to allow in-app user authentication using Touch ID.
Cordova Plugin to leverage the iOS local authentication framework to allow in-app user authentication using Touch ID.
Important: You must target a real device when building. If you target the simulator, the build will fail.
cordova plugin add cordova-plugin-touchid
cordova plugin add https://github.com/leecrossley/cordova-plugin-touchid.git
You do not need to reference any JavaScript, the Cordova plugin architecture will add a touchid object to your root automatically when you build.
Ensure you use the plugin after your deviceready event has been fired.
Pass the following arguments to the authenticate() function, to prompt the user to authenticate via TouchID:
touchid.authenticate(successCallback, failureCallback, text);
*NOTE: The localised text you present to the user should provide a clear reason for why you are requesting they authenticate themselves, and what action you will be taking based on that authentication.
Although the authenticate() function will return an error if the user is unable to authenticate via Touch ID, you may wish to check support without prompting the user to authenticate. This can be done by passing following arguments to the checkSupport() function:
touchid.checkSupport(successCallback, notSupportedCallback);
iOS 8+
FAQs
Cordova Plugin to leverage the iOS local authentication framework to allow in-app user authentication using Touch ID.
We found that cordova-plugin-touchid demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An emerging npm supply chain attack that infects repos, steals CI secrets, and targets developer AI toolchains for further compromise.

Company News
Socket is proud to join the OpenJS Foundation as a Silver Member, deepening our commitment to the long-term health and security of the JavaScript ecosystem.

Security News
npm now links to Socket's security analysis on every package page. Here's what you'll find when you click through.