Fixed TouchID bypass #67

EddyVerbruggen · Oct 29, 2018 · 2d407b4 · 2d407b4
1 parent d521216
commit 2d407b4
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "cordova-plugin-touch-id",
-  "version": "3.3.2",
+  "version": "3.4.0",
   "description": "Scan the fingerprint of your user with the TouchID sensor, or the user's Face with Face ID on iPhone X",
   "cordova": {
     "id": "cordova-plugin-touch-id",

diff --git a/src/ios/TouchID.m b/src/ios/TouchID.m
@@ -194,7 +194,7 @@ - (BOOL) createKeyChainEntry {
   SecAccessControlRef accessControlRef = SecAccessControlCreateWithFlags(
                                                                          kCFAllocatorDefault,
                                                                          kSecAttrAccessibleWhenUnlockedThisDeviceOnly,
-                                                                         kSecAccessControlBiometryAny,
+                                                                         2, // either kSecAccessControlBiometryAny (iOS 11.3+) or kSecAccessControlTouchIDAny (iOS < 11.3),
                                                                          &accessControlError);
   if (accessControlRef == NULL || accessControlError != NULL)
   {
@@ -203,7 +203,7 @@ - (BOOL) createKeyChainEntry {
   }
 
   attributes[(__bridge id)kSecAttrAccessControl] = (__bridge id)accessControlRef;
-  attributes[(__bridge id)kSecUseNoAuthenticationUI] = @YES;
+  attributes[(__bridge id)kSecUseAuthenticationUI] = @YES;
   // The content of the password is not important.
   attributes[(__bridge id)kSecValueData] = [@"dummy content" dataUsingEncoding:NSUTF8StringEncoding];