Revert "Add option for iOS/MacOS to allow non-biometric authenticatio…

…n (`darwinBiometricOnly`) authpass#101"

This reverts commit daae973.

CHANGELOG.md

@@ -1,9 +1,3 @@
-## 5.0.1-dev.1
-
-* Add option for iOS/MacOS to allow non-biometric authentication (`darwinBiometricOnly`) #101
-  * Improve [canAuthenticate] to differentiate between no available biometry and no available 
-    user code.
-
 ## 5.0.0+4
 
 * Add topics to pubspec.yaml

android/src/main/kotlin/design/codeux/biometric_storage/BiometricStoragePlugin.kt

@@ -45,7 +45,6 @@ enum class CanAuthenticateResponse(val code: Int) {
     ErrorNoBiometricEnrolled(BiometricManager.BIOMETRIC_ERROR_NONE_ENROLLED),
     ErrorNoHardware(BiometricManager.BIOMETRIC_ERROR_NO_HARDWARE),
     ErrorStatusUnknown(BiometricManager.BIOMETRIC_STATUS_UNKNOWN),
-    ErrorPasscodeNotSet(-99),
     ;
 
     override fun toString(): String {
@@ -318,12 +317,6 @@ class BiometricStoragePlugin : FlutterPlugin, ActivityAware, MethodCallHandler {
     }
 
     private fun canAuthenticate(): CanAuthenticateResponse {
-        val credentialsResponse = biometricManager.canAuthenticate(DEVICE_CREDENTIAL);
-        logger.debug { "canAuthenticate for DEVICE_CREDENTIAL: $credentialsResponse" }
-        if (credentialsResponse == BiometricManager.BIOMETRIC_ERROR_NONE_ENROLLED) {
-            return CanAuthenticateResponse.Success
-        }
-
         val response = biometricManager.canAuthenticate(
             BIOMETRIC_STRONG or BIOMETRIC_WEAK
         )

example/ios/Flutter/Flutter.podspec

@@ -1,6 +1,6 @@
 #
-# This podspec is NOT to be published. It is only used as a local source!
-# This is a generated file; do not edit or check into version control.
+# NOTE: This podspec is NOT to be published. It is only used as a local source!
+#       This is a generated file; do not edit or check into version control.
 #
 
 Pod::Spec.new do |s|

example/ios/Podfile.lock

@@ -19,4 +19,4 @@ SPEC CHECKSUMS:
 
 PODFILE CHECKSUM: ef19549a9bc3046e7bb7d2fab4d021637c0c58a3
 
-COCOAPODS: 1.12.1
+COCOAPODS: 1.11.3

example/ios/Runner.xcodeproj/project.pbxproj

@@ -3,7 +3,7 @@
 	archiveVersion = 1;
 	classes = {
 	};
-	objectVersion = 54;
+	objectVersion = 50;
 	objects = {
 
 /* Begin PBXBuildFile section */
@@ -163,7 +163,7 @@
 		97C146E61CF9000F007C117D /* Project object */ = {
 			isa = PBXProject;
 			attributes = {
-				LastUpgradeCheck = 1430;
+				LastUpgradeCheck = 1300;
 				ORGANIZATIONNAME = "The Chromium Authors";
 				TargetAttributes = {
 					97C146ED1CF9000F007C117D = {
@@ -208,12 +208,10 @@
 /* Begin PBXShellScriptBuildPhase section */
 		3B06AD1E1E4923F5004D2608 /* Thin Binary */ = {
 			isa = PBXShellScriptBuildPhase;
-			alwaysOutOfDate = 1;
 			buildActionMask = 2147483647;
 			files = (
 			);
 			inputPaths = (
-				"${TARGET_BUILD_DIR}/${INFOPLIST_PATH}",
 			);
 			name = "Thin Binary";
 			outputPaths = (
@@ -246,7 +244,6 @@
 		};
 		9740EEB61CF901F6004384FC /* Run Script */ = {
 			isa = PBXShellScriptBuildPhase;
-			alwaysOutOfDate = 1;
 			buildActionMask = 2147483647;
 			files = (
 			);

example/ios/Runner.xcodeproj/xcshareddata/xcschemes/Runner.xcscheme

@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <Scheme
-   LastUpgradeVersion = "1430"
+   LastUpgradeVersion = "1300"
    version = "1.3">
    <BuildAction
       parallelizeBuildables = "YES"

example/ios/Runner/Info.plist

@@ -45,7 +45,5 @@
 	<false/>
 	<key>CADisableMinimumFrameDurationOnPhone</key>
 	<true/>
-	<key>UIApplicationSupportsIndirectInputEvents</key>
-	<true/>
 </dict>
 </plist>

example/pubspec.lock

@@ -15,7 +15,7 @@ packages:
       path: ".."
       relative: true
     source: path
-    version: "5.0.0+4"
+    version: "5.0.0"
   boolean_selector:
     dependency: transitive
     description:

lib/src/biometric_storage.dart

@@ -18,9 +18,6 @@ enum CanAuthenticateResponse {
   errorNoBiometricEnrolled,
   errorNoHardware,
 
-  /// Passcode is not set (iOS/MacOS) or no user credentials (on macos).
-  errorPasscodeNotSet,
-
   /// Used on android if the status is unknown.
   /// https://developer.android.com/reference/androidx/biometric/BiometricManager#BIOMETRIC_STATUS_UNKNOWN
   statusUnknown,
@@ -34,7 +31,6 @@ const _canAuthenticateMapping = {
   'ErrorHwUnavailable': CanAuthenticateResponse.errorHwUnavailable,
   'ErrorNoBiometricEnrolled': CanAuthenticateResponse.errorNoBiometricEnrolled,
   'ErrorNoHardware': CanAuthenticateResponse.errorNoHardware,
-  'ErrorPasscodeNotSet': CanAuthenticateResponse.errorPasscodeNotSet,
   'ErrorUnknown': CanAuthenticateResponse.unsupported,
   'ErrorStatusUnknown': CanAuthenticateResponse.statusUnknown,
 };
@@ -87,7 +83,6 @@ class StorageFileInitOptions {
     this.authenticationValidityDurationSeconds = -1,
     this.authenticationRequired = true,
     this.androidBiometricOnly = true,
-    this.darwinBiometricOnly = true,
   });
 
   final int authenticationValidityDurationSeconds;
@@ -107,17 +102,11 @@ class StorageFileInitOptions {
   /// https://github.com/authpass/biometric_storage/issues/12#issuecomment-902508609
   final bool androidBiometricOnly;
 
-  /// Only for iOS and macOS:
-  /// Uses `.biometryCurrentSet` if true, `.userPresence` otherwise.
-  /// https://developer.apple.com/documentation/security/secaccesscontrolcreateflags/1392879-userpresence
-  final bool darwinBiometricOnly;
-
   Map<String, dynamic> toJson() => <String, dynamic>{
         'authenticationValidityDurationSeconds':
             authenticationValidityDurationSeconds,
         'authenticationRequired': authenticationRequired,
         'androidBiometricOnly': androidBiometricOnly,
-        'darwinBiometricOnly': darwinBiometricOnly,
       };
 }
 

macos/Classes/BiometricStorageImpl.swift

@@ -16,11 +16,9 @@ class InitOptions {
   init(params: [String: Any]) {
     authenticationValidityDurationSeconds = params["authenticationValidityDurationSeconds"] as? Int
     authenticationRequired = params["authenticationRequired"] as? Bool
-    darwinBiometricOnly = params["darwinBiometricOnly"] as? Bool
   }
   let authenticationValidityDurationSeconds: Int!
   let authenticationRequired: Bool!
-  let darwinBiometricOnly: Bool!
 }
 
 class IOSPromptInfo {
@@ -138,9 +136,7 @@ class BiometricStorageImpl {
     case .touchIDNotAvailable:
       result("ErrorHwUnavailable")
       break;
-    case .passcodeNotSet:
-      result("ErrorPasscodeNotSet")
-      break;
+    case .passcodeNotSet: fallthrough
     case .touchIDNotEnrolled:
       result("ErrorNoBiometricEnrolled")
       break;
@@ -198,14 +194,10 @@ class BiometricStorageFile {
   private func accessControl(_ result: @escaping StorageCallback) -> SecAccessControl? {
     let accessControlFlags: SecAccessControlCreateFlags
 
-    if initOptions.darwinBiometricOnly {
-      if #available(iOS 11.3, *) {
-        accessControlFlags =  .biometryCurrentSet
-      } else {
-        accessControlFlags = .touchIDCurrentSet
-      }
+    if #available(iOS 11.3, *) {
+      accessControlFlags =  .biometryCurrentSet
     } else {
-      accessControlFlags = .userPresence
+      accessControlFlags = .touchIDCurrentSet
     }
 
 //      access = SecAccessControlCreateWithFlags(nil,

pubspec.yaml

@@ -2,7 +2,7 @@ name: biometric_storage
 description: |
   Secure Storage: Encrypted data store optionally secured by biometric lock with support
   for iOS, Android, MacOS. Partial support for Linux, Windows and web (localStorage).
-version: 5.0.1-dev.1
+version: 5.0.0+4
 homepage: https://github.com/authpass/biometric_storage/
 
 environment: