7c14c554ae31

test: Pin biometric escrow key policy (v2.3.56)

time
2026-06-26 14:32 UTC · 4 months ago
machine
koh2
parent
fb8d5a7b6bd6
2 files app/build.gradle+2 −2app/src/test/java/com/peachpasswords/ui/lock/BiometricKeyStoreCoverageTest.kt+18 −0
app/build.gradle+2 −2
@@ -16,8 +16,8 @@1616         applicationId "com.peachpasswords"1717         minSdk 261818         targetSdk 3519-        versionCode 23550020-        versionName "2.3.55"19+        versionCode 23560020+        versionName "2.3.56"2121 2222         testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner"2323         vectorDrawables {

view file

app/src/test/java/com/peachpasswords/ui/lock/BiometricKeyStoreCoverageTest.kt+18 −0
@@ -0,0 +1,18 @@1+package com.peachpasswords.ui.lock2+3+import java.io.File4+import org.junit.Assert.assertTrue5+import org.junit.Test6+7+class BiometricKeyStoreCoverageTest {8+    @Test fun biometric_escrow_key_requires_strong_authenticated_hardware_use() {9+        val relativePath = "app/src/main/java/com/peachpasswords/ui/lock/BiometricKeyStore.kt"10+        val source = (File(relativePath).takeIf { it.exists() } ?: File("../$relativePath")).readText()11+12+        assertTrue(source.contains("KEYSTORE = \"AndroidKeyStore\""))13+        assertTrue(source.contains("TRANSFORM = \"AES/GCM/NoPadding\""))14+        assertTrue(source.contains(".setUserAuthenticationRequired(true)"))15+        assertTrue(source.contains(".setInvalidatedByBiometricEnrollment(true)"))16+        assertTrue(source.contains("KeyProperties.AUTH_BIOMETRIC_STRONG"))17+    }18+}

view file