Skip to content

New Secret Code Management

Context

To ensure consistency across applications, a revision of the secret code management generated at first login is necessary.

Technical Solutions

  1. Implementation of capacitor-biometric-auth plugin for mobile mode
  2. Implementation of a 4-digit PIN code for mobile mode
  3. Implementation of password authentication for desktop mode

Detailed Process

First Login

Mobile Mode with Biometrics

  1. Enter a code
  2. Propose biometric authentication usage
  3. Save the entered code

Mobile Mode without Biometrics

  • Enter a 4-digit PIN code

Desktop Mode

  • Enter a password

Subsequent Logins

Mobile Mode with Biometrics

  1. Use biometric authentication
  2. In case of repeated failures:
    • Reset stored code
    • Request PIN code

Mobile Mode without Biometrics

  • Enter PIN code

Desktop Mode

  • Enter password

Changes Summary

Mode First Login Subsequent Logins
Mobile (with biometrics) Code + Biometric option Biometrics (with PIN fallback)
Mobile (without biometrics) 4-digit PIN code 4-digit PIN code
Desktop Password Password

Implementation Notes

Mobile Implementation

  • Biometric Authentication:

    • Uses capacitor-biometric-auth plugin
    • Requires fallback mechanism to PIN
    • Maximum attempt limit
  • PIN Code Requirements:

    • Must be exactly 4 digits
    • Needs secure storage implementation

Desktop Implementation

  • Password Requirements:
    • Standard password security rules
Edited by Dorian Marco