biometric_storage

• iOS/macOS: StorageFileInitOptions.darwinKeychainAccessGroup to store items in a shared keychain access group (kSecAttrAccessGroup), so an app extension can read them. Note that the access group is part of an item's identity — existing items are not migrated automatically.

• Improve canAuthenticate to include InitOptions to decide for which authenticaiton type to check.

• upgrade dependency to web 1.0

• enable building on jdk 17 and up https://github.com/authpass/biometric_storage/issues/117 thanks @connyduck

• Split Split authenticationValidityDurationSeconds between android and iOS
  • darwinTouchIDAuthenticationForceReuseContextDuration: Basically the equivalent to androidAuthenticationValidityDuration
  • darwinTouchIDAuthenticationAllowableReuseDuration
• android: return correct code if no biometric is enrolled #115 @ThomasLamprecht
• web: migrate from dart:html to package:web (for wasm support).

• Add option for iOS/MacOS to allow non-biometric authentication (darwinBiometricOnly) #101
  • Improve [canAuthenticate] to differentiate between no available biometry and no available
    user code.
• Bump dart sdk requirement to 3.2.

• Add option for iOS/MacOS to allow non-biometric authentication (darwinBiometricOnly) #101
  • Improve [canAuthenticate] to differentiate between no available biometry and no available user code.
• Bump dart sdk requirement to 3.2.

• Allow overriding of promptInfo during read/write thanks @luckyrat
• Android: (POTENTIALLY BREAKING): Completely removed deprecated old file backend based on androidx.security. This was deprecated since version 3.0.0 and users should have been migrated on every read or write. (this is only internally, does not change anything of the API).
• Update dependencies.

Build with flutter 3.13, fix macOS build

• MacOS: fix building on MacOS

android: Upgrade AGP, fix building with AGP 8, upgrade all java depen…

Android: Depend on slf4j-api.

• Android: Upgrade AGP, fix building with AGP 8
• Android: Depend on slf4j-api.

• Add topics to pubspec.yaml

• iOS/MacOS: Reuse LAContext to make touchIDAuthenticationAllowableReuseDuration work. thanks @radvansky-tomas

• Android: Move File I/O and encryption to background thread. (Previously used UI Thread)
  #64

• Android: Move File I/O and encryption to background thread. (Previously used UI Thread) https://github.com/authpass/biometric_storage/pull/64

• Fix building on all platforms, add github actions to test building.

• Android: Remove Moshi dependency altogether. #53

• Update to Moshi 1.13 for Kotlin 1.6.0 compatibility. #53

• Fixed compile errors with Flutter >= 2.8.0 (Compatible with Flutter 2.5). #47 fix #42

• Android: Validate options on int When authenticationValidityDurationSeconds == -1, then androidBiometricOnly must be true
• Android: if authenticationValidityDurationSeconds is > 0 only show authentication prompt when necessary. (It will simply try to use the key, and show the auth prompt only when a UserNotAuthenticatedException is thrown).
• Android: When biometric key is invalidated (e.g. because biometric security is changed on the device), we simply delete the old key and data! (KeyPermanentlyInvalidatedException)

• Stable Release 🥳
• **Please check below for breaking changes in the -rc releases.

• Android: Fix a few bugs with authenticationValidityDurationSeconds == -1
• iOS/MacOS: Don't set timeout for authenticationValidityDurationSeconds == -1
• iOS/MacOS: Don't raise an error on delete if item was not found.
• Android: Fix user cancel code. (Previously an unknown exception was thrown instead of userCanceled)
• Android: Ignore androidBiometricOnly prior to Android R (30).
• Introduce AuthExceptionCode.canceled

• Breaking Change: authenticationValidityDurationSeconds is now -1 by default, which was not supported before hand. If you need backward compatibility, make sure to override this value to the previous value of 10.

• Breaking Change: No more support for Android v1 Plugin registration.

• Breaking Change: No longer using androidx.security, but instead handle encryption directly. Temporarily there is a fallback to read old content. This requires either reencrypting everything, or old data will no longer be readable.

  1. This should fix a lot of errors.
  2. This now finally also allows using authenticationValidityDurationSeconds = -1.
  3. BIOMETRIC_WEAK is no longer used, only BIOMETRIC_STRONG.

• Don't ask for authentication for delete.

• Breaking Change: due to the introduction of iOS prompt info there is now a wrapper object PromptInfo which contains AndroidPromptInfo and IosPromptInfo.
• Android: Add support for local (non-biometric) storage (#28, thanks @killalad)
• Android: Update all gradle dependencies, removed gradle-wrapper from plugin folder.
• iOS: Add support for customizing prompt strings.
• MacOS: Add support for customizing prompt strings.

• Android
  • compatibility with kotlin 1.5.20
  • Remove jcenter() references.
  • androidx.core:core:1.3.2 to 1.6.0
  • moshi from 1.11.0 to 1.12.0 (this is the kotlin 1.5.20 compatibility problem)

• Android upgrade dependencies:
  • androidx.security:security-crypto from 1.1.0-alpha02 to 1.1.0-alpha03
  • androidx.biometric:biometric from 1.1.0-beta01 to 1.2.0-alpha03
  • Update README to clarify minSdkVersion and kotlin version

• Handle android BIOMETRIC_STATUS_UNKNOWN response on older devices (Android 9/API 28(?))

• Null safety stable release.

• Null safety migration.

• Upgrade to latest Android dependencies (gradle plugin, androidx.*, gradle plugin)
  • androidx.security:security-crypto 1.0.0-rc02 to 1.1.0-alpha02
  • androidx.biometric:biometric 1.0.1 to 1.1.0-beta01

• upgrade android moshi dependency.

• Support for web support: Warning: Unencrypted - stores into local storage on web!
• Updated README to add details about windows.

• Fix windows plugin config.

• Workaround to not load win32 when compiling for web.

• Windows: Initial support for windows. only unauthenticated storage in Credential Manager.

• Linux: Initial support for Linux - only unauthenticated storage in Keyring.

• Android: allow customization of the PromptInfo (labels, buttons, etc). @patrickhammond

• Android: on error send stack trace to flutter. also fixed a couple of warnings.

• Android: updated dependencies to androidx.security, biometric, gradle tools.

• Android: fix PromptInfo deserialization with minification.
• Android: add proguard setting to fix protobuf exceptions.

• Android: Upgrade to androidx.security 1.0.0-rc02 which should fix protobuf incompatibilities #6 https://developer.android.com/jetpack/androidx/releases/security#security-crypto-1.0.0-rc02