element-hq / element-hq/element-ios
FaceID lockout handling
- Dominant language
- Swift
- Stars
- 1.8k
- Forks
- 544
- PR merge metrics
- PR metrics pending
Description
Following a security fix in 1.9.7 we need to start handling FaceID lockout errors better from an user point of view.
FaceID can go in lockout if the maximum number of failed attempts has been exceed and at that point we will continue to prompt the user to retry or logout. The correct solution would be to inform the user of what's happening and suggest alternatives.
As far as we know the FaceId lockout can be fixed only be locking and unlocking the device with the pin code.
Contributor guide
Research direction
No files or tests are named. Start by reproducing FaceID lockout after the maximum failed attempts and tracing the iOS biometric authentication flow; done means the user is told what happened, is offered the device PIN or another alternative, and is no longer repeatedly prompted to retry or log out.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- swift
- Domain
- authentication, mobile, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100