feat: Biometric auth

[sjeohp-zz]

No description provided.

[parity-cla-bot]

It looks like @sjeohp signed our Contributor License Agreement. 👍

Many thanks,

Parity Technologies CLA Bot

[sjeohp-zz]

The objective here is to allow longer alpha-numeric pins to be practical.

• Set a complex pin
• Enable biometric auth
  • this encrypts the pin using a biometric key that stays in secure-hardware, and stores it.
• Sign/backup/etc
  • secure-hardware decrypts the pin.
  • pin is used to decrypt seed.
  • if biometry fails for some reason (EG. if someone enrolls a new fingerprint or disables biometry in device settings, the existing keys will be invalidated), then fall back to pin entry.

Additionally: sign transactions while minimizing time the decrypted seed spends in memory, IE. decrypt and sign in rust without returning it to js.

[hanwencheng]

Why downgrade swift version here?

[sjeohp-zz]

I was testing with an old Xcode that didn't support 5. This change isn't important, I actually forgot about it.

[hanwencheng]

Many thanks for the PR!

From what I see the biometric auth workflow is: react native js code--> native code --> rust code, is that correct?

By the way I have not find the code for biometric auth part in native code, am I too early to review it now? Otherwise could you please point them out ?

For the native secure functions: it would be nice if you could make some test code in rust part or on Native part (on #353 I am also working on test cases). Both for the future development and the current reviewing and testing process.

[sjeohp-zz]

By the way I have not find the code for biometric auth part in native code, am I too early to review it now? Otherwise could you please point them out ?

https://github.com/sjeohp/secure-native

For the native secure functions: it would be nice if you could make some test code in rust part or on Native part (on #353 I am also working on test cases). Both for the future development and the current reviewing and testing process.

👍

[hanwencheng]

I have the sample integration test for testing native modules, which is on hanwen-native-test branch, you may add another test as here.

[sjeohp-zz]

I have the sample integration test for testing native modules, which is on hanwen-native-test branch, you may add another test as here.

I don't believe it will work in this case since the methods will fail without biometric input..

[hanwencheng]

Ah, it is possible on iOS, first you start with await device.setBiometricEnrollment(true) and then use await device.matchFinger() to pass the biometric auth.

[sjeohp-zz]

I run them in AndroidStudio or Xcode. In theory you should be able to use xcodebuild from the command line.

Could you please put the command into package.json, and use a script like yarn unit:ios for example.

Yep, done

Having issues getting e2e working with the native lib at all, will discuss.

does import {NativeModule} from 'react-native' works ?

That breaks jest and still doesn't let me run the detox test. Working e2e tests for the native modules might have to be a separate PR.