Skip to content

[API Breaking] allowedAuthenticatorsOn{Enable,Authenticate}#222

Merged
tung2744 merged 2 commits into
authgear:mainfrom
louischan-oursky:dev-3177-dev-3146
Nov 17, 2025
Merged

[API Breaking] allowedAuthenticatorsOn{Enable,Authenticate}#222
tung2744 merged 2 commits into
authgear:mainfrom
louischan-oursky:dev-3177-dev-3146

Conversation

@louischan-oursky
Copy link
Copy Markdown
Contributor

ref DEV-3177
ref DEV-3146

To adapt this change if you have been using biometric from a older SDK,
you MUST set both allowedAuthenticatorsOnEnable and allowedAuthenticatorsOnAuthenticate
to the original value you have been using.

For example, if you have been using BIOMETRIC_STRONG, you must set both
to `List.of(BIOMETRIC_STRONG)`.
Otherwise, your app will crash with `android.security.KeyStoreException: Key user not authenticated`
This is because if you relax the constraint, the already stored key has
a more strict constraint and the authenticated context is insufficient
to unlock the key.
@tung2744 tung2744 merged commit faaeed2 into authgear:main Nov 17, 2025
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants