expo-local-authentication 13.7.0 → 14.0.0

package/CHANGELOG.md

@@ -10,6 +10,29 @@
 
 ### 💡 Others
 
+## 14.0.0 — 2024-04-18
+
+### 🛠 Breaking changes
+
+- `SecurityLevel.BIOMETRIC` has been deprecated in favour of `SecurityLevel.BIOMETRIC_STRONG` and `SecurityLevel.BIOMETRIC_WEAK`. Using `SecurityLevel.BIOMETRIC` might lead to unexpected behaviour. ([#26768](https://github.com/expo/expo/pull/26768) by [@behenate](https://github.com/behenate))
+
+### 🎉 New features
+
+- [Android] Add support for `weak` and `strong` biometric authentication. ([#26768](https://github.com/expo/expo/pull/26768) by [@behenate](https://github.com/behenate))
+
+### 💡 Others
+
+- Prevent config plugin from writing permissions until prebuild. ([#28107](https://github.com/expo/expo/pull/28107) by [@EvanBacon](https://github.com/EvanBacon))
+- drop unused web `name` property. ([#27437](https://github.com/expo/expo/pull/27437) by [@EvanBacon](https://github.com/EvanBacon))
+- Removed deprecated backward compatible Gradle settings. ([#28083](https://github.com/expo/expo/pull/28083) by [@kudo](https://github.com/kudo))
+
+## 13.8.0 — 2023-11-14
+
+### 🛠 Breaking changes
+
+- Bumped iOS deployment target to 13.4. ([#25063](https://github.com/expo/expo/pull/25063) by [@gabrieldonadel](https://github.com/gabrieldonadel))
+- On `Android` bump `compileSdkVersion` and `targetSdkVersion` to `34`. ([#24708](https://github.com/expo/expo/pull/24708) by [@alanjhughes](https://github.com/alanjhughes))
+
 ## 13.7.0 — 2023-10-17
 
 ### 🛠 Breaking changes

package/android/build.gradle

@@ -1,109 +1,23 @@
 apply plugin: 'com.android.library'
-apply plugin: 'kotlin-android'
-apply plugin: 'maven-publish'
 
 group = 'host.exp.exponent'
-version = '13.7.0'
+version = '14.0.0'
 
 def expoModulesCorePlugin = new File(project(":expo-modules-core").projectDir.absolutePath, "ExpoModulesCorePlugin.gradle")
-if (expoModulesCorePlugin.exists()) {
-  apply from: expoModulesCorePlugin
-  applyKotlinExpoModulesCorePlugin()
-  // Remove this check, but keep the contents after SDK49 support is dropped
-  if (safeExtGet("expoProvidesDefaultConfig", false)) {
-    useExpoPublishing()
-    useCoreDependencies()
-  }
-}
-
-buildscript {
-  // Simple helper that allows the root project to override versions declared by this library.
-  ext.safeExtGet = { prop, fallback ->
-    rootProject.ext.has(prop) ? rootProject.ext.get(prop) : fallback
-  }
-
-  // Ensures backward compatibility
-  ext.getKotlinVersion = {
-    if (ext.has("kotlinVersion")) {
-      ext.kotlinVersion()
-    } else {
-      ext.safeExtGet("kotlinVersion", "1.8.10")
-    }
-  }
-
-  repositories {
-    mavenCentral()
-  }
-
-  dependencies {
-    classpath("org.jetbrains.kotlin:kotlin-gradle-plugin:${getKotlinVersion()}")
-  }
-}
-
-// Remove this if and it's contents, when support for SDK49 is dropped
-if (!safeExtGet("expoProvidesDefaultConfig", false)) {
-  afterEvaluate {
-    publishing {
-      publications {
-        release(MavenPublication) {
-          from components.release
-        }
-      }
-      repositories {
-        maven {
-          url = mavenLocal().url
-        }
-      }
-    }
-  }
-}
+apply from: expoModulesCorePlugin
+applyKotlinExpoModulesCorePlugin()
+useCoreDependencies()
+useDefaultAndroidSdkVersions()
+useExpoPublishing()
 
 android {
-  // Remove this if and it's contents, when support for SDK49 is dropped
-  if (!safeExtGet("expoProvidesDefaultConfig", false)) {
-    compileSdkVersion safeExtGet("compileSdkVersion", 33)
-
-    defaultConfig {
-      minSdkVersion safeExtGet("minSdkVersion", 23)
-      targetSdkVersion safeExtGet("targetSdkVersion", 33)
-    }
-
-    publishing {
-      singleVariant("release") {
-        withSourcesJar()
-      }
-    }
-
-    lintOptions {
-      abortOnError false
-    }
-  }
-
-  def agpVersion = com.android.Version.ANDROID_GRADLE_PLUGIN_VERSION
-  if (agpVersion.tokenize('.')[0].toInteger() < 8) {
-    compileOptions {
-      sourceCompatibility JavaVersion.VERSION_11
-      targetCompatibility JavaVersion.VERSION_11
-    }
-
-    kotlinOptions {
-      jvmTarget = JavaVersion.VERSION_11.majorVersion
-    }
-  }
-
   namespace "expo.modules.localauthentication"
   defaultConfig {
     versionCode 30
-    versionName "13.7.0"
+    versionName "14.0.0"
   }
 }
 
 dependencies {
-  // Remove this if and it's contents, when support for SDK49 is dropped
-  if (!safeExtGet("expoProvidesDefaultConfig", false)) {
-    implementation project(':expo-modules-core')
-    implementation "org.jetbrains.kotlin:kotlin-stdlib-jdk7:${getKotlinVersion()}"
-  }
-
   implementation "androidx.biometric:biometric:1.2.0-alpha04"
 }

package/android/src/main/java/expo/modules/localauthentication/LocalAuthenticationModule.kt

@@ -17,8 +17,6 @@ import expo.modules.kotlin.exception.UnexpectedException
 import expo.modules.kotlin.functions.Queues
 import expo.modules.kotlin.modules.Module
 import expo.modules.kotlin.modules.ModuleDefinition
-import expo.modules.kotlin.records.Field
-import expo.modules.kotlin.records.Record
 import kotlinx.coroutines.launch
 import java.util.concurrent.Executor
 import java.util.concurrent.Executors
@@ -28,28 +26,15 @@ private const val AUTHENTICATION_TYPE_FACIAL_RECOGNITION = 2
 private const val AUTHENTICATION_TYPE_IRIS = 3
 private const val SECURITY_LEVEL_NONE = 0
 private const val SECURITY_LEVEL_SECRET = 1
-private const val SECURITY_LEVEL_BIOMETRIC = 2
+private const val SECURITY_LEVEL_BIOMETRIC_WEAK = 2
+private const val SECURITY_LEVEL_BIOMETRIC_STRONG = 3
 private const val DEVICE_CREDENTIAL_FALLBACK_CODE = 6
 
-class AuthOptions : Record {
-  @Field
-  val promptMessage: String = ""
-
-  @Field
-  val cancelLabel: String = ""
-
-  @Field
-  val disableDeviceFallback: Boolean = false
-
-  @Field
-  val requireConfirmation: Boolean = true
-}
-
 class LocalAuthenticationModule : Module() {
   override fun definition() = ModuleDefinition {
     Name("ExpoLocalAuthentication")
 
-    AsyncFunction("supportedAuthenticationTypesAsync") {
+    AsyncFunction<Set<Int>>("supportedAuthenticationTypesAsync") {
       val results = mutableSetOf<Int>()
       if (canAuthenticateUsingWeakBiometrics() == BiometricManager.BIOMETRIC_ERROR_NO_HARDWARE) {
         return@AsyncFunction results
@@ -67,21 +52,24 @@ class LocalAuthenticationModule : Module() {
       return@AsyncFunction results
     }
 
-    AsyncFunction("hasHardwareAsync") {
+    AsyncFunction<Boolean>("hasHardwareAsync") {
       canAuthenticateUsingWeakBiometrics() != BiometricManager.BIOMETRIC_ERROR_NO_HARDWARE
     }
 
-    AsyncFunction("isEnrolledAsync") {
+    AsyncFunction<Boolean>("isEnrolledAsync") {
       canAuthenticateUsingWeakBiometrics() == BiometricManager.BIOMETRIC_SUCCESS
     }
 
-    AsyncFunction("getEnrolledLevelAsync") {
+    AsyncFunction<Int>("getEnrolledLevelAsync") {
       var level = SECURITY_LEVEL_NONE
       if (isDeviceSecure) {
         level = SECURITY_LEVEL_SECRET
       }
       if (canAuthenticateUsingWeakBiometrics() == BiometricManager.BIOMETRIC_SUCCESS) {
-        level = SECURITY_LEVEL_BIOMETRIC
+        level = SECURITY_LEVEL_BIOMETRIC_WEAK
+      }
+      if (canAuthenticateUsingStrongBiometrics() == BiometricManager.BIOMETRIC_SUCCESS) {
+        level = SECURITY_LEVEL_BIOMETRIC_STRONG
       }
       return@AsyncFunction level
     }
@@ -222,8 +210,12 @@ class LocalAuthenticationModule : Module() {
 
     val promptMessage = options.promptMessage
     val cancelLabel = options.cancelLabel
-    val disableDeviceFallback = options.disableDeviceFallback
     val requireConfirmation = options.requireConfirmation
+    val allowedAuthenticators = if (options.disableDeviceFallback) {
+      options.biometricsSecurityLevel.toNativeBiometricSecurityLevel()
+    } else {
+      options.biometricsSecurityLevel.toNativeBiometricSecurityLevel() or BiometricManager.Authenticators.DEVICE_CREDENTIAL
+    }
 
     isAuthenticating = true
     this.promise = promise
@@ -231,14 +223,9 @@ class LocalAuthenticationModule : Module() {
     biometricPrompt = BiometricPrompt(fragmentActivity, executor, authenticationCallback)
     val promptInfoBuilder = PromptInfo.Builder().apply {
       setTitle(promptMessage)
-
-      if (disableDeviceFallback) {
+      setAllowedAuthenticators(allowedAuthenticators)
+      if (options.disableDeviceFallback) {
         setNegativeButtonText(cancelLabel)
-      } else {
-        setAllowedAuthenticators(
-          BiometricManager.Authenticators.BIOMETRIC_WEAK
-            or BiometricManager.Authenticators.DEVICE_CREDENTIAL
-        )
       }
       setConfirmationRequired(requireConfirmation)
     }
@@ -336,6 +323,9 @@ class LocalAuthenticationModule : Module() {
   private fun canAuthenticateUsingWeakBiometrics(): Int =
     biometricManager.canAuthenticate(BiometricManager.Authenticators.BIOMETRIC_WEAK)
 
+  private fun canAuthenticateUsingStrongBiometrics(): Int =
+    biometricManager.canAuthenticate(BiometricManager.Authenticators.BIOMETRIC_STRONG)
+
   private fun createResponse(
     error: String? = null,
     warning: String? = null

package/android/src/main/java/expo/modules/localauthentication/LocalAuthenticationRecords.kt

@@ -0,0 +1,35 @@
+package expo.modules.localauthentication
+
+import androidx.biometric.BiometricManager
+import expo.modules.kotlin.records.Field
+import expo.modules.kotlin.records.Record
+import expo.modules.kotlin.types.Enumerable
+
+internal enum class BiometricsSecurityLevel(val value: String) : Enumerable {
+  WEAK("weak"),
+  STRONG("strong");
+
+  fun toNativeBiometricSecurityLevel(): Int {
+    return when (this) {
+      WEAK -> BiometricManager.Authenticators.BIOMETRIC_WEAK
+      STRONG -> BiometricManager.Authenticators.BIOMETRIC_STRONG
+    }
+  }
+}
+
+internal class AuthOptions : Record {
+  @Field
+  val promptMessage: String = ""
+
+  @Field
+  val cancelLabel: String = ""
+
+  @Field
+  val disableDeviceFallback: Boolean = false
+
+  @Field
+  val requireConfirmation: Boolean = true
+
+  @Field
+  val biometricsSecurityLevel: BiometricsSecurityLevel = BiometricsSecurityLevel.WEAK
+}

package/build/ExpoLocalAuthentication.web.d.ts

@@ -1,6 +1,5 @@
 import { AuthenticationType, SecurityLevel } from './LocalAuthentication.types';
 declare const _default: {
-    readonly name: string;
     hasHardwareAsync(): Promise<boolean>;
     isEnrolledAsync(): Promise<boolean>;
     getEnrolledLevelAsync(): Promise<SecurityLevel>;

package/build/ExpoLocalAuthentication.web.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ExpoLocalAuthentication.web.d.ts","sourceRoot":"","sources":["../src/ExpoLocalAuthentication.web.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;;;wBAMpD,QAAQ,OAAO,CAAC;uBAGjB,QAAQ,OAAO,CAAC;6BAGV,QAAQ,aAAa,CAAC;yCAGV,QAAQ,kBAAkB,EAAE,CAAC;;AAb1E,wBAgBE"}
+{"version":3,"file":"ExpoLocalAuthentication.web.d.ts","sourceRoot":"","sources":["../src/ExpoLocalAuthentication.web.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;;wBAGpD,OAAO,CAAC,OAAO,CAAC;uBAGjB,OAAO,CAAC,OAAO,CAAC;6BAGV,OAAO,CAAC,aAAa,CAAC;yCAGV,OAAO,CAAC,kBAAkB,EAAE,CAAC;;AAV1E,wBAaE"}

package/build/ExpoLocalAuthentication.web.js

@@ -1,8 +1,5 @@
 import { SecurityLevel } from './LocalAuthentication.types';
 export default {
-    get name() {
-        return 'ExpoLocalAuthentication';
-    },
     async hasHardwareAsync() {
         return false;
     },

package/build/ExpoLocalAuthentication.web.js.map

@@ -1 +1 @@
-{"version":3,"file":"ExpoLocalAuthentication.web.js","sourceRoot":"","sources":["../src/ExpoLocalAuthentication.web.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEhF,eAAe;IACb,IAAI,IAAI;QACN,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,KAAK,CAAC,gBAAgB;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,CAAC,eAAe;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,CAAC,qBAAqB;QACzB,OAAO,aAAa,CAAC,IAAI,CAAC;IAC5B,CAAC;IACD,KAAK,CAAC,iCAAiC;QACrC,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC","sourcesContent":["import { AuthenticationType, SecurityLevel } from './LocalAuthentication.types';\n\nexport default {\n  get name(): string {\n    return 'ExpoLocalAuthentication';\n  },\n  async hasHardwareAsync(): Promise<boolean> {\n    return false;\n  },\n  async isEnrolledAsync(): Promise<boolean> {\n    return false;\n  },\n  async getEnrolledLevelAsync(): Promise<SecurityLevel> {\n    return SecurityLevel.NONE;\n  },\n  async supportedAuthenticationTypesAsync(): Promise<AuthenticationType[]> {\n    return [];\n  },\n};\n"]}
+{"version":3,"file":"ExpoLocalAuthentication.web.js","sourceRoot":"","sources":["../src/ExpoLocalAuthentication.web.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEhF,eAAe;IACb,KAAK,CAAC,gBAAgB;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,CAAC,eAAe;QACnB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,CAAC,qBAAqB;QACzB,OAAO,aAAa,CAAC,IAAI,CAAC;IAC5B,CAAC;IACD,KAAK,CAAC,iCAAiC;QACrC,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC","sourcesContent":["import { AuthenticationType, SecurityLevel } from './LocalAuthentication.types';\n\nexport default {\n  async hasHardwareAsync(): Promise<boolean> {\n    return false;\n  },\n  async isEnrolledAsync(): Promise<boolean> {\n    return false;\n  },\n  async getEnrolledLevelAsync(): Promise<SecurityLevel> {\n    return SecurityLevel.NONE;\n  },\n  async supportedAuthenticationTypesAsync(): Promise<AuthenticationType[]> {\n    return [];\n  },\n};\n"]}

package/build/LocalAuthentication.d.ts

@@ -1,5 +1,5 @@
-import { LocalAuthenticationOptions, AuthenticationType, LocalAuthenticationResult, SecurityLevel } from './LocalAuthentication.types';
-export { LocalAuthenticationOptions, AuthenticationType, LocalAuthenticationResult, SecurityLevel };
+import { LocalAuthenticationOptions, AuthenticationType, LocalAuthenticationResult, SecurityLevel, BiometricsSecurityLevel } from './LocalAuthentication.types';
+export { LocalAuthenticationOptions, AuthenticationType, LocalAuthenticationResult, SecurityLevel, BiometricsSecurityLevel, };
 /**
  * Determine whether a face or fingerprint scanner is available on the device.
  * @return Returns a promise which fulfils with a `boolean` value indicating whether a face or

package/build/LocalAuthentication.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LocalAuthentication.d.ts","sourceRoot":"","sources":["../src/LocalAuthentication.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,yBAAyB,EACzB,aAAa,EACd,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,0BAA0B,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,aAAa,EAAE,CAAC;AAGpG;;;;GAIG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC,CAKzD;AAGD;;;;;;GAMG;AACH,wBAAsB,iCAAiC,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAKvF;AAGD;;;;GAIG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAKxD;AAGD;;;;;;GAMG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,aAAa,CAAC,CAKpE;AAGD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CAgBpC;AAGD;;;GAGG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAKxD"}
+{"version":3,"file":"LocalAuthentication.d.ts","sourceRoot":"","sources":["../src/LocalAuthentication.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,yBAAyB,EACzB,aAAa,EACb,uBAAuB,EACxB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,yBAAyB,EACzB,aAAa,EACb,uBAAuB,GACxB,CAAC;AAGF;;;;GAIG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC,CAKzD;AAGD;;;;;;GAMG;AACH,wBAAsB,iCAAiC,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAKvF;AAGD;;;;GAIG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAKxD;AAGD;;;;;;GAMG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,aAAa,CAAC,CAKpE;AAGD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAAC,yBAAyB,CAAC,CAgBpC;AAGD;;;GAGG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAKxD"}

package/build/LocalAuthentication.js

@@ -2,7 +2,7 @@ import { UnavailabilityError } from 'expo-modules-core';
 import invariant from 'invariant';
 import ExpoLocalAuthentication from './ExpoLocalAuthentication';
 import { AuthenticationType, SecurityLevel, } from './LocalAuthentication.types';
-export { AuthenticationType, SecurityLevel };
+export { AuthenticationType, SecurityLevel, };
 // @needsAudit
 /**
  * Determine whether a face or fingerprint scanner is available on the device.

package/build/LocalAuthentication.js.map

@@ -1 +1 @@
-{"version":3,"file":"LocalAuthentication.js","sourceRoot":"","sources":["../src/LocalAuthentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,SAAS,MAAM,WAAW,CAAC;AAElC,OAAO,uBAAuB,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAEL,kBAAkB,EAElB,aAAa,GACd,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAA8B,kBAAkB,EAA6B,aAAa,EAAE,CAAC;AAEpG,cAAc;AACd;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC,uBAAuB,CAAC,gBAAgB,EAAE;QAC7C,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,kBAAkB,CAAC,CAAC;KAChF;IACD,OAAO,MAAM,uBAAuB,CAAC,gBAAgB,EAAE,CAAC;AAC1D,CAAC;AAED,cAAc;AACd;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC;IACrD,IAAI,CAAC,uBAAuB,CAAC,iCAAiC,EAAE;QAC9D,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,mCAAmC,CAAC,CAAC;KACjG;IACD,OAAO,MAAM,uBAAuB,CAAC,iCAAiC,EAAE,CAAC;AAC3E,CAAC;AAED,cAAc;AACd;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC,uBAAuB,CAAC,eAAe,EAAE;QAC5C,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,iBAAiB,CAAC,CAAC;KAC/E;IACD,OAAO,MAAM,uBAAuB,CAAC,eAAe,EAAE,CAAC;AACzD,CAAC;AAED,cAAc;AACd;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,IAAI,CAAC,uBAAuB,CAAC,qBAAqB,EAAE;QAClD,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,uBAAuB,CAAC,CAAC;KACrF;IACD,OAAO,MAAM,uBAAuB,CAAC,qBAAqB,EAAE,CAAC;AAC/D,CAAC;AAED,cAAc;AACd;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAsC,EAAE;IAExC,IAAI,CAAC,uBAAuB,CAAC,iBAAiB,EAAE;QAC9C,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,mBAAmB,CAAC,CAAC;KACjF;IAED,IAAI,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE;QAC3C,SAAS,CACP,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,EACzE,6FAA6F,CAC9F,CAAC;KACH;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,cAAc,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;IAE9F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,cAAc;AACd;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,EAAE;QAC/C,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,oBAAoB,CAAC,CAAC;KAClF;IACD,MAAM,uBAAuB,CAAC,kBAAkB,EAAE,CAAC;AACrD,CAAC","sourcesContent":["import { UnavailabilityError } from 'expo-modules-core';\nimport invariant from 'invariant';\n\nimport ExpoLocalAuthentication from './ExpoLocalAuthentication';\nimport {\n  LocalAuthenticationOptions,\n  AuthenticationType,\n  LocalAuthenticationResult,\n  SecurityLevel,\n} from './LocalAuthentication.types';\n\nexport { LocalAuthenticationOptions, AuthenticationType, LocalAuthenticationResult, SecurityLevel };\n\n// @needsAudit\n/**\n * Determine whether a face or fingerprint scanner is available on the device.\n * @return Returns a promise which fulfils with a `boolean` value indicating whether a face or\n * fingerprint scanner is available on this device.\n */\nexport async function hasHardwareAsync(): Promise<boolean> {\n  if (!ExpoLocalAuthentication.hasHardwareAsync) {\n    throw new UnavailabilityError('expo-local-authentication', 'hasHardwareAsync');\n  }\n  return await ExpoLocalAuthentication.hasHardwareAsync();\n}\n\n// @needsAudit\n/**\n * Determine what kinds of authentications are available on the device.\n * @return Returns a promise which fulfils to an array containing [`AuthenticationType`s](#authenticationtype).\n *\n * Devices can support multiple authentication methods- i.e. `[1,2]` means the device supports both\n * fingerprint and facial recognition. If none are supported, this method returns an empty array.\n */\nexport async function supportedAuthenticationTypesAsync(): Promise<AuthenticationType[]> {\n  if (!ExpoLocalAuthentication.supportedAuthenticationTypesAsync) {\n    throw new UnavailabilityError('expo-local-authentication', 'supportedAuthenticationTypesAsync');\n  }\n  return await ExpoLocalAuthentication.supportedAuthenticationTypesAsync();\n}\n\n// @needsAudit\n/**\n * Determine whether the device has saved fingerprints or facial data to use for authentication.\n * @return Returns a promise which fulfils to `boolean` value indicating whether the device has\n * saved fingerprints or facial data for authentication.\n */\nexport async function isEnrolledAsync(): Promise<boolean> {\n  if (!ExpoLocalAuthentication.isEnrolledAsync) {\n    throw new UnavailabilityError('expo-local-authentication', 'isEnrolledAsync');\n  }\n  return await ExpoLocalAuthentication.isEnrolledAsync();\n}\n\n// @needsAudit\n/**\n * Determine what kind of authentication is enrolled on the device.\n * @return Returns a promise which fulfils with [`SecurityLevel`](#securitylevel).\n * > **Note:** On Android devices prior to M, `SECRET` can be returned if only the SIM lock has been\n * enrolled, which is not the method that [`authenticateAsync`](#localauthenticationauthenticateasyncoptions)\n * prompts.\n */\nexport async function getEnrolledLevelAsync(): Promise<SecurityLevel> {\n  if (!ExpoLocalAuthentication.getEnrolledLevelAsync) {\n    throw new UnavailabilityError('expo-local-authentication', 'getEnrolledLevelAsync');\n  }\n  return await ExpoLocalAuthentication.getEnrolledLevelAsync();\n}\n\n// @needsAudit\n/**\n * Attempts to authenticate via Fingerprint/TouchID (or FaceID if available on the device).\n * > **Note:** Apple requires apps which use FaceID to provide a description of why they use this API.\n * If you try to use FaceID on an iPhone with FaceID without providing `infoPlist.NSFaceIDUsageDescription`\n * in `app.json`, the module will authenticate using device passcode. For more information about\n * usage descriptions on iOS, see [permissions guide](/guides/permissions/#ios).\n * @param options\n * @return Returns a promise which fulfils with [`LocalAuthenticationResult`](#localauthenticationresult).\n */\nexport async function authenticateAsync(\n  options: LocalAuthenticationOptions = {}\n): Promise<LocalAuthenticationResult> {\n  if (!ExpoLocalAuthentication.authenticateAsync) {\n    throw new UnavailabilityError('expo-local-authentication', 'authenticateAsync');\n  }\n\n  if (options.hasOwnProperty('promptMessage')) {\n    invariant(\n      typeof options.promptMessage === 'string' && options.promptMessage.length,\n      'LocalAuthentication.authenticateAsync : `options.promptMessage` must be a non-empty string.'\n    );\n  }\n\n  const promptMessage = options.promptMessage || 'Authenticate';\n  const result = await ExpoLocalAuthentication.authenticateAsync({ ...options, promptMessage });\n\n  return result;\n}\n\n// @needsAudit\n/**\n * Cancels authentication flow.\n * @platform android\n */\nexport async function cancelAuthenticate(): Promise<void> {\n  if (!ExpoLocalAuthentication.cancelAuthenticate) {\n    throw new UnavailabilityError('expo-local-authentication', 'cancelAuthenticate');\n  }\n  await ExpoLocalAuthentication.cancelAuthenticate();\n}\n"]}
+{"version":3,"file":"LocalAuthentication.js","sourceRoot":"","sources":["../src/LocalAuthentication.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,SAAS,MAAM,WAAW,CAAC;AAElC,OAAO,uBAAuB,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAEL,kBAAkB,EAElB,aAAa,GAEd,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAEL,kBAAkB,EAElB,aAAa,GAEd,CAAC;AAEF,cAAc;AACd;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,CAAC,uBAAuB,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,kBAAkB,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,uBAAuB,CAAC,gBAAgB,EAAE,CAAC;AAC1D,CAAC;AAED,cAAc;AACd;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC;IACrD,IAAI,CAAC,uBAAuB,CAAC,iCAAiC,EAAE,CAAC;QAC/D,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,mCAAmC,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,MAAM,uBAAuB,CAAC,iCAAiC,EAAE,CAAC;AAC3E,CAAC;AAED,cAAc;AACd;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC,uBAAuB,CAAC,eAAe,EAAE,CAAC;QAC7C,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,iBAAiB,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,MAAM,uBAAuB,CAAC,eAAe,EAAE,CAAC;AACzD,CAAC;AAED,cAAc;AACd;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,IAAI,CAAC,uBAAuB,CAAC,qBAAqB,EAAE,CAAC;QACnD,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,uBAAuB,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,MAAM,uBAAuB,CAAC,qBAAqB,EAAE,CAAC;AAC/D,CAAC;AAED,cAAc;AACd;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAsC,EAAE;IAExC,IAAI,CAAC,uBAAuB,CAAC,iBAAiB,EAAE,CAAC;QAC/C,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,mBAAmB,CAAC,CAAC;IAClF,CAAC;IAED,IAAI,OAAO,CAAC,cAAc,CAAC,eAAe,CAAC,EAAE,CAAC;QAC5C,SAAS,CACP,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,EACzE,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,cAAc,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;IAE9F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,cAAc;AACd;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,EAAE,CAAC;QAChD,MAAM,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,oBAAoB,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,uBAAuB,CAAC,kBAAkB,EAAE,CAAC;AACrD,CAAC","sourcesContent":["import { UnavailabilityError } from 'expo-modules-core';\nimport invariant from 'invariant';\n\nimport ExpoLocalAuthentication from './ExpoLocalAuthentication';\nimport {\n  LocalAuthenticationOptions,\n  AuthenticationType,\n  LocalAuthenticationResult,\n  SecurityLevel,\n  BiometricsSecurityLevel,\n} from './LocalAuthentication.types';\n\nexport {\n  LocalAuthenticationOptions,\n  AuthenticationType,\n  LocalAuthenticationResult,\n  SecurityLevel,\n  BiometricsSecurityLevel,\n};\n\n// @needsAudit\n/**\n * Determine whether a face or fingerprint scanner is available on the device.\n * @return Returns a promise which fulfils with a `boolean` value indicating whether a face or\n * fingerprint scanner is available on this device.\n */\nexport async function hasHardwareAsync(): Promise<boolean> {\n  if (!ExpoLocalAuthentication.hasHardwareAsync) {\n    throw new UnavailabilityError('expo-local-authentication', 'hasHardwareAsync');\n  }\n  return await ExpoLocalAuthentication.hasHardwareAsync();\n}\n\n// @needsAudit\n/**\n * Determine what kinds of authentications are available on the device.\n * @return Returns a promise which fulfils to an array containing [`AuthenticationType`s](#authenticationtype).\n *\n * Devices can support multiple authentication methods- i.e. `[1,2]` means the device supports both\n * fingerprint and facial recognition. If none are supported, this method returns an empty array.\n */\nexport async function supportedAuthenticationTypesAsync(): Promise<AuthenticationType[]> {\n  if (!ExpoLocalAuthentication.supportedAuthenticationTypesAsync) {\n    throw new UnavailabilityError('expo-local-authentication', 'supportedAuthenticationTypesAsync');\n  }\n  return await ExpoLocalAuthentication.supportedAuthenticationTypesAsync();\n}\n\n// @needsAudit\n/**\n * Determine whether the device has saved fingerprints or facial data to use for authentication.\n * @return Returns a promise which fulfils to `boolean` value indicating whether the device has\n * saved fingerprints or facial data for authentication.\n */\nexport async function isEnrolledAsync(): Promise<boolean> {\n  if (!ExpoLocalAuthentication.isEnrolledAsync) {\n    throw new UnavailabilityError('expo-local-authentication', 'isEnrolledAsync');\n  }\n  return await ExpoLocalAuthentication.isEnrolledAsync();\n}\n\n// @needsAudit\n/**\n * Determine what kind of authentication is enrolled on the device.\n * @return Returns a promise which fulfils with [`SecurityLevel`](#securitylevel).\n * > **Note:** On Android devices prior to M, `SECRET` can be returned if only the SIM lock has been\n * enrolled, which is not the method that [`authenticateAsync`](#localauthenticationauthenticateasyncoptions)\n * prompts.\n */\nexport async function getEnrolledLevelAsync(): Promise<SecurityLevel> {\n  if (!ExpoLocalAuthentication.getEnrolledLevelAsync) {\n    throw new UnavailabilityError('expo-local-authentication', 'getEnrolledLevelAsync');\n  }\n  return await ExpoLocalAuthentication.getEnrolledLevelAsync();\n}\n\n// @needsAudit\n/**\n * Attempts to authenticate via Fingerprint/TouchID (or FaceID if available on the device).\n * > **Note:** Apple requires apps which use FaceID to provide a description of why they use this API.\n * If you try to use FaceID on an iPhone with FaceID without providing `infoPlist.NSFaceIDUsageDescription`\n * in `app.json`, the module will authenticate using device passcode. For more information about\n * usage descriptions on iOS, see [permissions guide](/guides/permissions/#ios).\n * @param options\n * @return Returns a promise which fulfils with [`LocalAuthenticationResult`](#localauthenticationresult).\n */\nexport async function authenticateAsync(\n  options: LocalAuthenticationOptions = {}\n): Promise<LocalAuthenticationResult> {\n  if (!ExpoLocalAuthentication.authenticateAsync) {\n    throw new UnavailabilityError('expo-local-authentication', 'authenticateAsync');\n  }\n\n  if (options.hasOwnProperty('promptMessage')) {\n    invariant(\n      typeof options.promptMessage === 'string' && options.promptMessage.length,\n      'LocalAuthentication.authenticateAsync : `options.promptMessage` must be a non-empty string.'\n    );\n  }\n\n  const promptMessage = options.promptMessage || 'Authenticate';\n  const result = await ExpoLocalAuthentication.authenticateAsync({ ...options, promptMessage });\n\n  return result;\n}\n\n// @needsAudit\n/**\n * Cancels authentication flow.\n * @platform android\n */\nexport async function cancelAuthenticate(): Promise<void> {\n  if (!ExpoLocalAuthentication.cancelAuthenticate) {\n    throw new UnavailabilityError('expo-local-authentication', 'cancelAuthenticate');\n  }\n  await ExpoLocalAuthentication.cancelAuthenticate();\n}\n"]}

package/build/LocalAuthentication.types.d.ts

@@ -31,9 +31,25 @@ export declare enum SecurityLevel {
     SECRET = 1,
     /**
      * Indicates biometric authentication.
+     * @deprecated please use `BIOMETRIC_STRONG` or `BIOMETRIC_WEAK` instead.
+     * @hidden
      */
-    BIOMETRIC = 2
+    BIOMETRIC,
+    /**
+     * Indicates weak biometric authentication. For example, a 2D image-based face unlock.
+     * > There are currently no weak biometric authentication options on iOS.
+     */
+    BIOMETRIC_WEAK = 2,
+    /**
+     * Indicates strong biometric authentication. For example, a fingerprint scan or 3D face unlock.
+     */
+    BIOMETRIC_STRONG = 3
 }
+/**
+ * Security level of the biometric authentication to allow.
+ * @platform android
+ */
+export type BiometricsSecurityLevel = 'weak' | 'strong';
 export type LocalAuthenticationOptions = {
     /**
      * A message that is shown alongside the TouchID or FaceID prompt.
@@ -59,6 +75,14 @@ export type LocalAuthenticationOptions = {
      * @platform android
      */
     requireConfirmation?: boolean;
+    /**
+     * Sets the security class of biometric authentication to allow.
+     * `strong` allows only Android Class 3 biometrics. For example, a fingerprint or a 3D face scan.
+     * `weak` allows both Android Class 3 and Class 2 biometrics. Class 2 biometrics are less secure than Class 3. For example, a camera-based face unlock.
+     * @platform android
+     * @default 'weak'
+     */
+    biometricsSecurityLevel?: BiometricsSecurityLevel;
     /**
      * Allows to customize the default `Use Passcode` label shown after several failed
      * authentication attempts. Setting this option to an empty string disables this button from

package/build/LocalAuthentication.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LocalAuthentication.types.d.ts","sourceRoot":"","sources":["../src/LocalAuthentication.types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,yBAAyB,GACjC;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAGxD,oBAAY,kBAAkB;IAC5B;;OAEG;IACH,WAAW,IAAI;IACf;;OAEG;IACH,kBAAkB,IAAI;IACtB;;;OAGG;IACH,IAAI,IAAI;CACT;AAGD,oBAAY,aAAa;IACvB;;OAEG;IACH,IAAI,IAAI;IACR;;OAEG;IACH,MAAM,IAAI;IACV;;OAEG;IACH,SAAS,IAAI;CACd;AAGD,MAAM,MAAM,0BAA0B,GAAG;IACvC;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC"}
+{"version":3,"file":"LocalAuthentication.types.d.ts","sourceRoot":"","sources":["../src/LocalAuthentication.types.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,yBAAyB,GACjC;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAGxD,oBAAY,kBAAkB;IAC5B;;OAEG;IACH,WAAW,IAAI;IACf;;OAEG;IACH,kBAAkB,IAAI;IACtB;;;OAGG;IACH,IAAI,IAAI;CACT;AAGD,oBAAY,aAAa;IACvB;;OAEG;IACH,IAAI,IAAI;IACR;;OAEG;IACH,MAAM,IAAI;IACV;;;;OAIG;IACH,SAEkC;IAClC;;;OAGG;IACH,cAAc,IAAI;IAClB;;OAEG;IACH,gBAAgB,IAAI;CACrB;AAkBD;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAGxD,MAAM,MAAM,0BAA0B,GAAG;IACvC;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;;OAOG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;IAClD;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC"}

package/build/LocalAuthentication.types.js

@@ -1,3 +1,4 @@
+import { Platform } from 'expo-modules-core';
 // @needsAudit
 export var AuthenticationType;
 (function (AuthenticationType) {
@@ -28,7 +29,32 @@ export var SecurityLevel;
     SecurityLevel[SecurityLevel["SECRET"] = 1] = "SECRET";
     /**
      * Indicates biometric authentication.
+     * @deprecated please use `BIOMETRIC_STRONG` or `BIOMETRIC_WEAK` instead.
+     * @hidden
      */
-    SecurityLevel[SecurityLevel["BIOMETRIC"] = 2] = "BIOMETRIC";
+    SecurityLevel[SecurityLevel["BIOMETRIC"] = Platform.OS === 'android'
+        ? SecurityLevel.BIOMETRIC_WEAK
+        : SecurityLevel.BIOMETRIC_STRONG] = "BIOMETRIC";
+    /**
+     * Indicates weak biometric authentication. For example, a 2D image-based face unlock.
+     * > There are currently no weak biometric authentication options on iOS.
+     */
+    SecurityLevel[SecurityLevel["BIOMETRIC_WEAK"] = 2] = "BIOMETRIC_WEAK";
+    /**
+     * Indicates strong biometric authentication. For example, a fingerprint scan or 3D face unlock.
+     */
+    SecurityLevel[SecurityLevel["BIOMETRIC_STRONG"] = 3] = "BIOMETRIC_STRONG";
 })(SecurityLevel || (SecurityLevel = {}));
+Object.defineProperty(SecurityLevel, 'BIOMETRIC', {
+    get() {
+        const additionalMessage = Platform.OS === 'android'
+            ? '. `SecurityLevel.BIOMETRIC` is currently an alias for `SecurityLevel.BIOMETRIC_WEAK` on Android, which might lead to unexpected behaviour.'
+            : '';
+        console.warn('`SecurityLevel.BIOMETRIC` has been deprecated. Please use `SecurityLevel.BIOMETRIC_WEAK` or `SecurityLevel.BIOMETRIC_STRONG` instead' +
+            additionalMessage);
+        return Platform.OS === 'android'
+            ? SecurityLevel.BIOMETRIC_WEAK
+            : SecurityLevel.BIOMETRIC_STRONG;
+    },
+});
 //# sourceMappingURL=LocalAuthentication.types.js.map

package/build/LocalAuthentication.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"LocalAuthentication.types.js","sourceRoot":"","sources":["../src/LocalAuthentication.types.ts"],"names":[],"mappings":"AAIA,cAAc;AACd,MAAM,CAAN,IAAY,kBAcX;AAdD,WAAY,kBAAkB;IAC5B;;OAEG;IACH,yEAAe,CAAA;IACf;;OAEG;IACH,uFAAsB,CAAA;IACtB;;;OAGG;IACH,2DAAQ,CAAA;AACV,CAAC,EAdW,kBAAkB,KAAlB,kBAAkB,QAc7B;AAED,cAAc;AACd,MAAM,CAAN,IAAY,aAaX;AAbD,WAAY,aAAa;IACvB;;OAEG;IACH,iDAAQ,CAAA;IACR;;OAEG;IACH,qDAAU,CAAA;IACV;;OAEG;IACH,2DAAa,CAAA;AACf,CAAC,EAbW,aAAa,KAAb,aAAa,QAaxB","sourcesContent":["export type LocalAuthenticationResult =\n  | { success: true }\n  | { success: false; error: string; warning?: string };\n\n// @needsAudit\nexport enum AuthenticationType {\n  /**\n   * Indicates fingerprint support.\n   */\n  FINGERPRINT = 1,\n  /**\n   * Indicates facial recognition support.\n   */\n  FACIAL_RECOGNITION = 2,\n  /**\n   * Indicates iris recognition support.\n   * @platform android\n   */\n  IRIS = 3,\n}\n\n// @needsAudit\nexport enum SecurityLevel {\n  /**\n   * Indicates no enrolled authentication.\n   */\n  NONE = 0,\n  /**\n   * Indicates non-biometric authentication (e.g. PIN, Pattern).\n   */\n  SECRET = 1,\n  /**\n   * Indicates biometric authentication.\n   */\n  BIOMETRIC = 2,\n}\n\n// @needsAudit\nexport type LocalAuthenticationOptions = {\n  /**\n   * A message that is shown alongside the TouchID or FaceID prompt.\n   */\n  promptMessage?: string;\n  /**\n   * Allows to customize the default `Cancel` label shown.\n   */\n  cancelLabel?: string;\n  /**\n   * After several failed attempts the system will fallback to the device passcode. This setting\n   * allows you to disable this option and instead handle the fallback yourself. This can be\n   * preferable in certain custom authentication workflows. This behaviour maps to using the iOS\n   * [LAPolicyDeviceOwnerAuthenticationWithBiometrics](https://developer.apple.com/documentation/localauthentication/lapolicy/lapolicydeviceownerauthenticationwithbiometrics?language=objc)\n   * policy rather than the [LAPolicyDeviceOwnerAuthentication](https://developer.apple.com/documentation/localauthentication/lapolicy/lapolicydeviceownerauthentication?language=objc)\n   * policy. Defaults to `false`.\n   */\n  disableDeviceFallback?: boolean;\n  /**\n   * Sets a hint to the system for whether to require user confirmation after authentication.\n   * This may be ignored by the system if the user has disabled implicit authentication in Settings\n   * or if it does not apply to a particular biometric modality. Defaults to `true`.\n   * @platform android\n   */\n  requireConfirmation?: boolean;\n  /**\n   * Allows to customize the default `Use Passcode` label shown after several failed\n   * authentication attempts. Setting this option to an empty string disables this button from\n   * showing in the prompt.\n   * @platform ios\n   */\n  fallbackLabel?: string;\n};\n"]}
+{"version":3,"file":"LocalAuthentication.types.js","sourceRoot":"","sources":["../src/LocalAuthentication.types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAM7C,cAAc;AACd,MAAM,CAAN,IAAY,kBAcX;AAdD,WAAY,kBAAkB;IAC5B;;OAEG;IACH,yEAAe,CAAA;IACf;;OAEG;IACH,uFAAsB,CAAA;IACtB;;;OAGG;IACH,2DAAQ,CAAA;AACV,CAAC,EAdW,kBAAkB,KAAlB,kBAAkB,QAc7B;AAED,cAAc;AACd,MAAM,CAAN,IAAY,aA0BX;AA1BD,WAAY,aAAa;IACvB;;OAEG;IACH,iDAAQ,CAAA;IACR;;OAEG;IACH,qDAAU,CAAA;IACV;;;;OAIG;IACH,2CAAY,QAAQ,CAAC,EAAE,KAAK,SAAS;QACnC,CAAC,CAAC,aAAa,CAAC,cAAc;QAC9B,CAAC,CAAC,aAAa,CAAC,gBAAgB,eAAA,CAAA;IAClC;;;OAGG;IACH,qEAAkB,CAAA;IAClB;;OAEG;IACH,yEAAoB,CAAA;AACtB,CAAC,EA1BW,aAAa,KAAb,aAAa,QA0BxB;AAED,MAAM,CAAC,cAAc,CAAC,aAAa,EAAE,WAAW,EAAE;IAChD,GAAG;QACD,MAAM,iBAAiB,GACrB,QAAQ,CAAC,EAAE,KAAK,SAAS;YACvB,CAAC,CAAC,4IAA4I;YAC9I,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,CAAC,IAAI,CACV,sIAAsI;YACpI,iBAAiB,CACpB,CAAC;QACF,OAAO,QAAQ,CAAC,EAAE,KAAK,SAAS;YAC9B,CAAC,CAAC,aAAa,CAAC,cAAc;YAC9B,CAAC,CAAC,aAAa,CAAC,gBAAgB,CAAC;IACrC,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { Platform } from 'expo-modules-core';\n\nexport type LocalAuthenticationResult =\n  | { success: true }\n  | { success: false; error: string; warning?: string };\n\n// @needsAudit\nexport enum AuthenticationType {\n  /**\n   * Indicates fingerprint support.\n   */\n  FINGERPRINT = 1,\n  /**\n   * Indicates facial recognition support.\n   */\n  FACIAL_RECOGNITION = 2,\n  /**\n   * Indicates iris recognition support.\n   * @platform android\n   */\n  IRIS = 3,\n}\n\n// @needsAudit\nexport enum SecurityLevel {\n  /**\n   * Indicates no enrolled authentication.\n   */\n  NONE = 0,\n  /**\n   * Indicates non-biometric authentication (e.g. PIN, Pattern).\n   */\n  SECRET = 1,\n  /**\n   * Indicates biometric authentication.\n   * @deprecated please use `BIOMETRIC_STRONG` or `BIOMETRIC_WEAK` instead.\n   * @hidden\n   */\n  BIOMETRIC = Platform.OS === 'android'\n    ? SecurityLevel.BIOMETRIC_WEAK\n    : SecurityLevel.BIOMETRIC_STRONG,\n  /**\n   * Indicates weak biometric authentication. For example, a 2D image-based face unlock.\n   * > There are currently no weak biometric authentication options on iOS.\n   */\n  BIOMETRIC_WEAK = 2,\n  /**\n   * Indicates strong biometric authentication. For example, a fingerprint scan or 3D face unlock.\n   */\n  BIOMETRIC_STRONG = 3,\n}\n\nObject.defineProperty(SecurityLevel, 'BIOMETRIC', {\n  get() {\n    const additionalMessage =\n      Platform.OS === 'android'\n        ? '. `SecurityLevel.BIOMETRIC` is currently an alias for `SecurityLevel.BIOMETRIC_WEAK` on Android, which might lead to unexpected behaviour.'\n        : '';\n    console.warn(\n      '`SecurityLevel.BIOMETRIC` has been deprecated. Please use `SecurityLevel.BIOMETRIC_WEAK` or `SecurityLevel.BIOMETRIC_STRONG` instead' +\n        additionalMessage\n    );\n    return Platform.OS === 'android'\n      ? SecurityLevel.BIOMETRIC_WEAK\n      : SecurityLevel.BIOMETRIC_STRONG;\n  },\n});\n\n/**\n * Security level of the biometric authentication to allow.\n * @platform android\n */\nexport type BiometricsSecurityLevel = 'weak' | 'strong';\n\n// @needsAudit\nexport type LocalAuthenticationOptions = {\n  /**\n   * A message that is shown alongside the TouchID or FaceID prompt.\n   */\n  promptMessage?: string;\n  /**\n   * Allows to customize the default `Cancel` label shown.\n   */\n  cancelLabel?: string;\n  /**\n   * After several failed attempts the system will fallback to the device passcode. This setting\n   * allows you to disable this option and instead handle the fallback yourself. This can be\n   * preferable in certain custom authentication workflows. This behaviour maps to using the iOS\n   * [LAPolicyDeviceOwnerAuthenticationWithBiometrics](https://developer.apple.com/documentation/localauthentication/lapolicy/lapolicydeviceownerauthenticationwithbiometrics?language=objc)\n   * policy rather than the [LAPolicyDeviceOwnerAuthentication](https://developer.apple.com/documentation/localauthentication/lapolicy/lapolicydeviceownerauthentication?language=objc)\n   * policy. Defaults to `false`.\n   */\n  disableDeviceFallback?: boolean;\n  /**\n   * Sets a hint to the system for whether to require user confirmation after authentication.\n   * This may be ignored by the system if the user has disabled implicit authentication in Settings\n   * or if it does not apply to a particular biometric modality. Defaults to `true`.\n   * @platform android\n   */\n  requireConfirmation?: boolean;\n  /**\n   * Sets the security class of biometric authentication to allow.\n   * `strong` allows only Android Class 3 biometrics. For example, a fingerprint or a 3D face scan.\n   * `weak` allows both Android Class 3 and Class 2 biometrics. Class 2 biometrics are less secure than Class 3. For example, a camera-based face unlock.\n   * @platform android\n   * @default 'weak'\n   */\n  biometricsSecurityLevel?: BiometricsSecurityLevel;\n  /**\n   * Allows to customize the default `Use Passcode` label shown after several failed\n   * authentication attempts. Setting this option to an empty string disables this button from\n   * showing in the prompt.\n   * @platform ios\n   */\n  fallbackLabel?: string;\n};\n"]}

package/ios/ExpoLocalAuthentication.podspec

@@ -10,17 +10,17 @@ Pod::Spec.new do |s|
   s.license        = package['license']
   s.author         = package['author']
   s.homepage       = package['homepage']
-  s.platform       = :ios, '13.0'
+  s.platform       = :ios, '13.4'
   s.swift_version  = '5.4'
   s.source         = { git: 'https://github.com/expo/expo.git' }
   s.static_framework = true
 
   s.dependency 'ExpoModulesCore'
 
-  # Swift/Objective-C compatibility	
-  s.pod_target_xcconfig = {	
-    'DEFINES_MODULE' => 'YES',	
-    'SWIFT_COMPILATION_MODE' => 'wholemodule'	
+  # Swift/Objective-C compatibility
+  s.pod_target_xcconfig = {
+    'DEFINES_MODULE' => 'YES',
+    'SWIFT_COMPILATION_MODE' => 'wholemodule'
   }
 
   if !$ExpoUseSources&.include?(package['name']) && ENV['EXPO_USE_SOURCE'].to_i == 0 && File.exist?("#{s.name}.xcframework") && Gem::Version.new(Pod::VERSION) >= Gem::Version.new('1.10.0')

package/ios/LocalAuthenticationModule.swift

@@ -165,5 +165,6 @@ enum AuthenticationType: Int {
 enum SecurityLevel: Int {
   case none = 0
   case secret = 1
-  case biometric = 2
+  // We return any biometric as strong biometric, because there are currently no iOS devices with weak biometric options.
+  case biometric = 3
  }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "expo-local-authentication",
-  "version": "13.7.0",
+  "version": "14.0.0",
   "description": "Provides an API for FaceID and TouchID (iOS) or the Fingerprint API (Android) to authenticate the user with a face or fingerprint scan.",
   "main": "build/LocalAuthentication.js",
   "types": "build/LocalAuthentication.d.ts",
@@ -46,5 +46,5 @@
   "peerDependencies": {
     "expo": "*"
   },
-  "gitHead": "da25937e2a99661cbe5eb60ca1d8d6245fc96a50"
+  "gitHead": "4165b8d72e1b9a1889c2767534cc619e21468110"
 }

package/plugin/build/withLocalAuthentication.d.ts

@@ -1,5 +1,5 @@
 import { ConfigPlugin } from 'expo/config-plugins';
 declare const _default: ConfigPlugin<void | {
-    faceIDPermission?: string | undefined;
+    faceIDPermission?: string | false | undefined;
 }>;
 export default _default;

package/plugin/build/withLocalAuthentication.js

@@ -4,12 +4,11 @@ const config_plugins_1 = require("expo/config-plugins");
 const pkg = require('expo-local-authentication/package.json');
 const FACE_ID_USAGE = 'Allow $(PRODUCT_NAME) to use Face ID';
 const withLocalAuthentication = (config, { faceIDPermission } = {}) => {
-    if (!config.ios)
-        config.ios = {};
-    if (!config.ios.infoPlist)
-        config.ios.infoPlist = {};
-    config.ios.infoPlist.NSFaceIDUsageDescription =
-        faceIDPermission || config.ios.infoPlist.NSFaceIDUsageDescription || FACE_ID_USAGE;
+    config_plugins_1.IOSConfig.Permissions.createPermissionsPlugin({
+        NSFaceIDUsageDescription: FACE_ID_USAGE,
+    })(config, {
+        NSFaceIDUsageDescription: faceIDPermission,
+    });
     return config_plugins_1.AndroidConfig.Permissions.withPermissions(config, [
         'android.permission.USE_BIOMETRIC',
         'android.permission.USE_FINGERPRINT',

package/plugin/src/withLocalAuthentication.ts

@@ -1,16 +1,17 @@
-import { AndroidConfig, ConfigPlugin, createRunOncePlugin } from 'expo/config-plugins';
+import { AndroidConfig, ConfigPlugin, IOSConfig, createRunOncePlugin } from 'expo/config-plugins';
 
 const pkg = require('expo-local-authentication/package.json');
 const FACE_ID_USAGE = 'Allow $(PRODUCT_NAME) to use Face ID';
 
-const withLocalAuthentication: ConfigPlugin<{ faceIDPermission?: string } | void> = (
+const withLocalAuthentication: ConfigPlugin<{ faceIDPermission?: string | false } | void> = (
   config,
   { faceIDPermission } = {}
 ) => {
-  if (!config.ios) config.ios = {};
-  if (!config.ios.infoPlist) config.ios.infoPlist = {};
-  config.ios.infoPlist.NSFaceIDUsageDescription =
-    faceIDPermission || config.ios.infoPlist.NSFaceIDUsageDescription || FACE_ID_USAGE;
+  IOSConfig.Permissions.createPermissionsPlugin({
+    NSFaceIDUsageDescription: FACE_ID_USAGE,
+  })(config, {
+    NSFaceIDUsageDescription: faceIDPermission,
+  });
 
   return AndroidConfig.Permissions.withPermissions(config, [
     'android.permission.USE_BIOMETRIC',

package/src/ExpoLocalAuthentication.web.ts

@@ -1,9 +1,6 @@
 import { AuthenticationType, SecurityLevel } from './LocalAuthentication.types';
 
 export default {
-  get name(): string {
-    return 'ExpoLocalAuthentication';
-  },
   async hasHardwareAsync(): Promise<boolean> {
     return false;
   },

package/src/LocalAuthentication.ts

@@ -7,9 +7,16 @@ import {
   AuthenticationType,
   LocalAuthenticationResult,
   SecurityLevel,
+  BiometricsSecurityLevel,
 } from './LocalAuthentication.types';
 
-export { LocalAuthenticationOptions, AuthenticationType, LocalAuthenticationResult, SecurityLevel };
+export {
+  LocalAuthenticationOptions,
+  AuthenticationType,
+  LocalAuthenticationResult,
+  SecurityLevel,
+  BiometricsSecurityLevel,
+};
 
 // @needsAudit
 /**

package/src/LocalAuthentication.types.ts

@@ -1,3 +1,5 @@
+import { Platform } from 'expo-modules-core';
+
 export type LocalAuthenticationResult =
   | { success: true }
   | { success: false; error: string; warning?: string };
@@ -31,10 +33,45 @@ export enum SecurityLevel {
   SECRET = 1,
   /**
    * Indicates biometric authentication.
+   * @deprecated please use `BIOMETRIC_STRONG` or `BIOMETRIC_WEAK` instead.
+   * @hidden
+   */
+  BIOMETRIC = Platform.OS === 'android'
+    ? SecurityLevel.BIOMETRIC_WEAK
+    : SecurityLevel.BIOMETRIC_STRONG,
+  /**
+   * Indicates weak biometric authentication. For example, a 2D image-based face unlock.
+   * > There are currently no weak biometric authentication options on iOS.
+   */
+  BIOMETRIC_WEAK = 2,
+  /**
+   * Indicates strong biometric authentication. For example, a fingerprint scan or 3D face unlock.
    */
-  BIOMETRIC = 2,
+  BIOMETRIC_STRONG = 3,
 }
 
+Object.defineProperty(SecurityLevel, 'BIOMETRIC', {
+  get() {
+    const additionalMessage =
+      Platform.OS === 'android'
+        ? '. `SecurityLevel.BIOMETRIC` is currently an alias for `SecurityLevel.BIOMETRIC_WEAK` on Android, which might lead to unexpected behaviour.'
+        : '';
+    console.warn(
+      '`SecurityLevel.BIOMETRIC` has been deprecated. Please use `SecurityLevel.BIOMETRIC_WEAK` or `SecurityLevel.BIOMETRIC_STRONG` instead' +
+        additionalMessage
+    );
+    return Platform.OS === 'android'
+      ? SecurityLevel.BIOMETRIC_WEAK
+      : SecurityLevel.BIOMETRIC_STRONG;
+  },
+});
+
+/**
+ * Security level of the biometric authentication to allow.
+ * @platform android
+ */
+export type BiometricsSecurityLevel = 'weak' | 'strong';
+
 // @needsAudit
 export type LocalAuthenticationOptions = {
   /**
@@ -61,6 +98,14 @@ export type LocalAuthenticationOptions = {
    * @platform android
    */
   requireConfirmation?: boolean;
+  /**
+   * Sets the security class of biometric authentication to allow.
+   * `strong` allows only Android Class 3 biometrics. For example, a fingerprint or a 3D face scan.
+   * `weak` allows both Android Class 3 and Class 2 biometrics. Class 2 biometrics are less secure than Class 3. For example, a camera-based face unlock.
+   * @platform android
+   * @default 'weak'
+   */
+  biometricsSecurityLevel?: BiometricsSecurityLevel;
   /**
    * Allows to customize the default `Use Passcode` label shown after several failed
    * authentication attempts. Setting this option to an empty string disables this button from