Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Encrypt Cached User Information #1618

Open
eeatonaws opened this issue Jan 3, 2022 · 2 comments
Open

Encrypt Cached User Information #1618

eeatonaws opened this issue Jan 3, 2022 · 2 comments
Assignees
Labels
auth Related to the Auth category/plugins feature-request Request a new feature

Comments

@eeatonaws
Copy link
Contributor

When a user logs in using their phone number, CognitoIdentityProviderCache.xml file is created and stored in shared preferences and it holds the user's phone number in persistent storage. The format is as follows:
<string name="CognitoIdentityProvider.276dt8eeub4a9cmn9hlhs35u1d.{#phonenumber}.idToken.encrypted.keyvaluestoreversion">1</string>

Username is also used to form a key for the local cache. Although the data is stored in private mode, which will only allow apps that wrote the value to read it (unless root/mount the disk), we would like an option to encrypt the user information stored in shared preferences.

@eeatonaws eeatonaws added auth Related to the Auth category/plugins feature-request Request a new feature labels Jan 3, 2022
@sktimalsina sktimalsina self-assigned this May 4, 2022
@gpanshu
Copy link
Contributor

gpanshu commented Nov 17, 2022

Can you provide some more information on what the use case is what you are trying to achieve. The user information in V2 is now already stored in encrypted shared preferences except for deviceMetadata which is still stored in sharedpreferences. For more information please visit the docs page. I am going to keep this ticket open as this is not yet fully resolved.

@gpanshu gpanshu closed this as completed Nov 17, 2022
@github-actions
Copy link
Contributor

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.

@gpanshu gpanshu reopened this Nov 17, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
auth Related to the Auth category/plugins feature-request Request a new feature
Projects
None yet
Development

No branches or pull requests

3 participants