81 lines
2.8 KiB
Kotlin
81 lines
2.8 KiB
Kotlin
|
package org.thoughtcrime.securesms
|
||
|
|
|
||
|
|
import android.app.Activity
|
||
|
|
import android.content.Context
|
||
|
|
import android.content.Intent
|
||
|
|
import android.os.Build
|
||
|
|
import androidx.activity.result.contract.ActivityResultContract
|
||
|
|
import androidx.annotation.RequiresApi
|
||
|
|
import androidx.biometric.BiometricManager
|
||
|
|
import androidx.biometric.BiometricPrompt
|
||
|
|
import androidx.biometric.BiometricPrompt.PromptInfo
|
||
|
|
import org.signal.core.util.logging.Log
|
||
|
|
import org.thoughtcrime.securesms.util.ServiceUtil
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Authentication using phone biometric (face, fingerprint recognition) or device lock (pattern, pin or passphrase).
|
||
|
|
*/
|
||
|
|
class BiometricDeviceAuthentication(
|
||
|
|
private val biometricManager: BiometricManager,
|
||
|
|
private val biometricPrompt: BiometricPrompt,
|
||
|
|
private val biometricPromptInfo: PromptInfo
|
||
|
|
) {
|
||
|
|
companion object {
|
||
|
|
const val AUTHENTICATED = 1
|
||
|
|
const val NOT_AUTHENTICATED = -1
|
||
|
|
const val TAG: String = "BiometricDeviceAuth"
|
||
|
|
const val BIOMETRIC_AUTHENTICATORS = BiometricManager.Authenticators.BIOMETRIC_STRONG or BiometricManager.Authenticators.BIOMETRIC_WEAK
|
||
|
|
const val ALLOWED_AUTHENTICATORS = BIOMETRIC_AUTHENTICATORS or BiometricManager.Authenticators.DEVICE_CREDENTIAL
|
||
|
|
}
|
||
|
|
|
||
|
|
fun authenticate(context: Context, force: Boolean, showConfirmDeviceCredentialIntent: () -> Unit): Boolean {
|
||
|
|
val isKeyGuardSecure = ServiceUtil.getKeyguardManager(context).isKeyguardSecure
|
||
|
|
|
||
|
|
if (!isKeyGuardSecure) {
|
||
|
|
Log.w(TAG, "Keyguard not secure...")
|
||
|
|
return false
|
||
|
|
}
|
||
|
|
|
||
|
|
return if (Build.VERSION.SDK_INT != 29 && biometricManager.canAuthenticate(ALLOWED_AUTHENTICATORS) == BiometricManager.BIOMETRIC_SUCCESS) {
|
||
|
|
if (force) {
|
||
|
|
Log.i(TAG, "Listening for biometric authentication...")
|
||
|
|
biometricPrompt.authenticate(biometricPromptInfo)
|
||
|
|
} else {
|
||
|
|
Log.i(TAG, "Skipping show system biometric or device lock dialog unless forced")
|
||
|
|
}
|
||
|
|
true
|
||
|
|
} else if (force) {
|
||
|
|
if (force) {
|
||
|
|
Log.i(TAG, "firing intent...")
|
||
|
|
showConfirmDeviceCredentialIntent()
|
||
|
|
} else {
|
||
|
|
Log.i(TAG, "Skipping firing intent unless forced")
|
||
|
|
}
|
||
|
|
true
|
||
|
|
} else {
|
||
|
|
Log.w(TAG, "Not compatible...")
|
||
|
|
false
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
fun cancelAuthentication() {
|
||
|
|
biometricPrompt.cancelAuthentication()
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
class BiometricDeviceLockContract : ActivityResultContract<String, Int>() {
|
||
|
|
|
||
|
|
@RequiresApi(api = 21)
|
||
|
|
override fun createIntent(context: Context, input: String): Intent {
|
||
|
|
val keyguardManager = ServiceUtil.getKeyguardManager(context)
|
||
|
|
return keyguardManager.createConfirmDeviceCredentialIntent(input, "")
|
||
|
|
}
|
||
|
|
|
||
|
|
override fun parseResult(resultCode: Int, intent: Intent?) =
|
||
|
|
if (resultCode != Activity.RESULT_OK) {
|
||
|
|
BiometricDeviceAuthentication.NOT_AUTHENTICATED
|
||
|
|
} else {
|
||
|
|
BiometricDeviceAuthentication.AUTHENTICATED
|
||
|
|
}
|
||
|
|
}
|