Re: [Mifos-developer] REQUEST: Store 4-digit pin code on back-end for self-service login

[se...@singo.co.tz]

The question will be ... if it has to work completely offline... how 
would it serve by giving... accurate account balance etc...

On another note;

I have an a certain International bank app... whereby it allows PIN  
"OR" Fingerprint authentication.... so the trick is just to be able to 
read what the finger-authentication has thrown, is it ok or no...  at 
least the test was on iOS device! But I believe on Android it should be 
okay too..

But you have to register to allow that authentication method on your 
device before using it... meaning a user who hasn't registered it won't 
allow...

Regards
Sendoro

On 2017-04-17 05:02, SHIV ARORA wrote:
> If we store the pin on server then the app will be dependent on
> network connectivity.I think this passcode feature should work,
> irrelevant of the access of internet or not.On further stages, we
> would give the app offline access feature.So i think network
> dependency for this feature is not a good option.
> 
> On 14 Apr 2017 9:21 p.m., "Ed Cable" <ed...@mifos.org> wrote:
> 
>> Hi Nazeer,
>> 
>> Per our discussions, I wanted to send some further details on the
>> dev list about the requirements and conversations the mobile
>> developers working on the Android self-service app have been having.
>> 
>> First off, in order to make it easier for a user to log in and not
>> have to fully authenticate themselves each time they leave the
>> self-service app, we wanted to enable a 4 digit pin code that could
>> be used to log in to the app (once fully authenticated for a first
>> time). This is pretty standard practice in banking apps.
>> 
>> We didn't want to store that locally since it wouldn't be secure on
>> phones that are rooted.
>> 
>> With that constraint, we need to be able to store this pin on the
>> back-end - then it can also be shared across phones as well.
>> 
>> I'll let Rajan, Ishan, and Puneet and others chime in with more
>> details about access token that gets generated, its validity etc.
>> 
>> A couple of GSOC aspirants have already begun work on the creation
>> and entry of the pin via the app on the phone but we need your
>> assistance in storing it at the back-end.
>> 
>> I've created a ticket at:
>> https://issues.apache.org/jira/browse/FINERACT-424 [1]
>> 
>> Discussion surrounding those tickets can be found at
>> https://github.com/openMF/self-service-app/issues/115 [2] and
>> https://github.com/openMF/self-service-app/issues/132 [3]
>> 
>> Ed
>> 
>> --
>> 
>> ED CABLE
>> President/CEO, Mifos Initiative
>> edcable@mifos.org | Skype: edcable | Mobile: +1.484.477.8649
>> 
>> COLLECTIVELY CREATING A WORLD OF 3 BILLION MARIES | http://mifos.org
>> [4] _ [5] _ [6]
>> 
>> 
> ------------------------------------------------------------------------------
>> Check out the vibrant tech community on one of the world's most
>> engaging tech sites, Slashdot.org! http://sdm.link/slashdot [7]
>> Mifos-developer mailing list
>> mifos-developer@lists.sourceforge.net
>> Unsubscribe or change settings at:
>> https://lists.sourceforge.net/lists/listinfo/mifos-developer [8]
> 
> 
> Links:
> ------
> [1] https://issues.apache.org/jira/browse/FINERACT-424
> [2] https://github.com/openMF/self-service-app/issues/115
> [3] https://github.com/openMF/self-service-app/issues/132
> [4] http://mifos.org
> [5] http://facebook.com/mifos
> [6] http://www.twitter.com/mifos
> [7] http://sdm.link/slashdot
> [8] https://lists.sourceforge.net/lists/listinfo/mifos-developer
> 
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
> 
> Mifos-developer mailing list
> mifos-developer@lists.sourceforge.net
> Unsubscribe or change settings at:
> https://lists.sourceforge.net/lists/listinfo/mifos-developer