Check If Credential Exists Without Prompting For Fingerprint In Android
Is there an API or other method for determining if a credential exists on the device that doesn't require taking my fingerprint first in Android? Currently, I can call getSignPendi
Solution 1:
There is no way to be 100% sure. Best possible solution as of today is storing the credential id
in local storage (or a cookie) where it was created. That way, you can check if you should offer fingerprint login (aka. Platform Authenticator) option on that device, i.e., in that browser.
There's been some attempts in FIDO Alliance and W3C WebAuthn WG to change this, but so far it has not been done mainly due to privacy reasons.
Post a Comment for "Check If Credential Exists Without Prompting For Fingerprint In Android"