All geek questions in one place

Using Android KeyStore to store user credentials

I am experimenting with user authentication methods (more precisely, fingerprints), and I am also learning Android KeyStore. I am trying to create a system that allows the user to configure a fingerprint that will register the user on my server. Currently, the server requires a POST request, which requires a valid username / password.

I have a few questions about how this will work, because I'm just starting to understand how the APIs work Fingerprintand KeyStore.

1) When I request a fingerprint and get a successful response (which is easy enough to do) - How can I translate this into a valid username / password so that I can start my POST request? Do I need to store username and password in KeyStore?

2) How exactly will it look when I set up KeyStore? Do I need to set an alias for username and password? "myapp_user", "myapp_pass", for example?

3) How to save values ​​for username and password in KeyStore?

4) Do I even approach this problem correctly? Is there a better way to reliably attach a fingerprint to a combination of username and password?

Thanks for the help!

+4
2

AndroidKeystore , AndroidKeyStore. ( ), , ( ). , Android .

Android API 23+ AES ( AndroidKeyStore) AES , , .

API23 : RSA AndroidKeyStore, AES AndroidKeystore ( AES ). AES RSA, AndroidKeyStore, AES .

1 AES.

+3

. .

  • , .
  • android ( , ).
  • , .
  • , finger pint, .
  • ( ), , .

, . , t . , , , .

0

Source: https://habr.com/ru/post/1656830/

More articles:


All Articles