@exodus/react-native-biometrics 0.4.0 → 0.4.1

package/CHANGELOG.md

@@ -2,3 +2,7 @@
 
 All notable changes to this projected will be documented in this file.
 See [Conventional Commits](https://www.conventionalcommits.org) for commit guidelines.
+
+## 0.4.1 (2026-09-11)
+
+- Fix authentication failing before the prompt appears on Android 9–10 when device passcode fallback is enabled ([#9](https://github.com/ExodusMovement/react-native-biometrics/pull/9)).

package/README.md

@@ -30,7 +30,24 @@ const valid = await Biometrics.authenticate(
 | title | string | The title of the biometric prompt |
 | subtitle | string | The subtitle of the biometric prompt |
 | cancelButtonText | string | The text of the cancel button |
+| fallbackToPasscode | boolean | Allow the device PIN, pattern, or password as an alternative to biometrics (default: `false`) |
 
+With passcode fallback enabled, Android 9–10 (API 28–29) accepts Class 2 (weak) or
+Class 3 (strong) biometrics alongside device credentials. AndroidX does not support
+`BIOMETRIC_STRONG | DEVICE_CREDENTIAL` on these versions. Other Android versions,
+and biometric-only authentication on all versions, continue to require Class 3
+biometrics. Authentication does not use a `CryptoObject`.
+
+## Android tests
+
+With JDK 17, Gradle 8.12, Android SDK 36, and build tools 36.0.0 installed:
+
+```sh
+gradle -p test/android :biometrics:testDebugUnitTest
+```
+
+The tests use the library's AndroidX dependency and Robolectric to validate prompt
+creation on API 27, 28, 29, and 30, including the previously rejected combination.
 
 ## License
 

package/android/src/main/java/org/exodusmovement/rn/biometrics/RNBiometricsModule.java

@@ -3,6 +3,7 @@ package org.exodusmovement.rn.biometrics;
 import java.util.concurrent.atomic.AtomicBoolean;
 
 import android.app.Activity;
+import android.os.Build;
 import android.os.Handler;
 import android.os.Looper;
 
@@ -38,6 +39,28 @@ public final class RNBiometricsModule extends ReactContextBaseJavaModule {
         return NAME;
     }
 
+    static BiometricPrompt.PromptInfo createPromptInfo(String title, String subtitle, String cancelButtonText, boolean fallbackToPasscode) {
+        int authenticators = BiometricManager.Authenticators.BIOMETRIC_STRONG;
+        if (fallbackToPasscode) {
+            // AndroidX cannot combine strong biometrics with device credentials on API 28-29.
+            if (Build.VERSION.SDK_INT >= 28 && Build.VERSION.SDK_INT <= 29) {
+                authenticators = BiometricManager.Authenticators.BIOMETRIC_WEAK;
+            }
+            authenticators |= BiometricManager.Authenticators.DEVICE_CREDENTIAL;
+        }
+
+        BiometricPrompt.PromptInfo.Builder builder = new BiometricPrompt.PromptInfo.Builder()
+            .setAllowedAuthenticators(authenticators)
+            .setTitle(title)
+            .setSubtitle(subtitle);
+
+        if (!fallbackToPasscode) {
+            builder.setNegativeButtonText(cancelButtonText);
+        }
+
+        return builder.build();
+    }
+
     @ReactMethod
     public void isSupported(Promise promise) {
         try {
@@ -87,19 +110,6 @@ public final class RNBiometricsModule extends ReactContextBaseJavaModule {
                 };
 
                 try {
-                    int authenticators = fallbackToPasscode
-                        ? BiometricManager.Authenticators.BIOMETRIC_STRONG | BiometricManager.Authenticators.DEVICE_CREDENTIAL
-                        : BiometricManager.Authenticators.BIOMETRIC_STRONG;
-
-                    BiometricPrompt.PromptInfo.Builder promptInfoBuilder = new BiometricPrompt.PromptInfo.Builder()
-                        .setAllowedAuthenticators(authenticators)
-                        .setTitle(title)
-                        .setSubtitle(subtitle);
-
-                    if (!fallbackToPasscode) {
-                        promptInfoBuilder.setNegativeButtonText(cancelButtonText);
-                    }
-
                     BiometricPrompt prompt = new BiometricPrompt(
                         fragmentActivity,
                         ContextCompat.getMainExecutor(context),
@@ -110,7 +120,7 @@ public final class RNBiometricsModule extends ReactContextBaseJavaModule {
                     activePromise = promise;
                     activeSettled = settled;
 
-                    prompt.authenticate(promptInfoBuilder.build());
+                    prompt.authenticate(createPromptInfo(title, subtitle, cancelButtonText, fallbackToPasscode));
                 } catch (Exception e) {
                     if (settled.compareAndSet(false, true)) {
                         clearSlotIfMatches(promise);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exodus/react-native-biometrics",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "React Native Biometrics",
   "main": "index.js",
   "files": [