-
-
Notifications
You must be signed in to change notification settings - Fork 190
Description
On Android 16 Beta, the method isAvailable() incorrectly returns biometric even when the biometric authentication setting "Verify it's you in apps" (under Settings > Privacy & Security > Device unlock > Face & Fingerprint Unlock > Verify it's you in apps) is turned OFF. In previous Android versions like Android 14, this scenario would correctly throw an error such as BIOMETRIC_HARDWARE_NOT_SUPPORTED.
Steps to Reproduce
- On a device running Android 16 Beta, enroll fingerprints.
- Disable the setting: Settings > Security > Fingerprint > "Verify it's you" (turn it OFF).
- Call isAvailable() or isAvailable({ requireStrongBiometrics: true }).
Expected Behavior
isAvailable() should reject the promise or return BIOMETRIC_HARDWARE_NOT_SUPPORTED, indicating that biometric authentication is currently unavailable due to system/user settings.
Actual Behavior
isAvailable() resolves with biometric, even though Verify it's you in apps is turned off and authentication fails on show().
Plugin Version
cordova-plugin-fingerprint-aio: 6.0.0
Platform
Device: Pixel 7
OS: Android 16 Beta
Suggestion
Please confirm whether BiometricManager.canAuthenticate(BIOMETRIC_STRONG) returns BIOMETRIC_SUCCESS even with "Verify it's you" OFF in Android 16. If so, a workaround or updated fallback handling might be needed in the plugin to prevent false positives from isAvailable().