Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

What is the maximum value for authenticationValidityDurationSeconds? #112

Open
abdallah-odeh opened this issue Mar 27, 2024 · 0 comments
Open

Comments

@abdallah-odeh
Copy link

What is the maximum value I can set for authenticationValidityDurationSeconds?
I set it to 60 minutes but it's not working as expected! when this hour is over the user is not prompted to authenticate

my use case:
I am using biometric_storage to store the refresh_token for the user
my access token age is 15 minutes, & setting the authenticationValidityDurationSeconds to -1 will prompt the user to authenticate in every transaction (read & write)
and it is very bad UX to be using the app & suddenly a fingerprint prompt!
so what I have done is making the duration an hour, and during this hour I have my logic to check if the user really must authenticate or not
when the hour is over, I don't prompt anything and rely on this plugin, but the data is read & retrieved without a biometric authentication!

so

  1. What is the maximum duration for authenticationValidityDurationSeconds?
  2. Is there a better way to implement this using only this plugin? (making the biometric prompt depending on the transaction not the storage file)?

thanks in advance

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant