Apple: #495: Test for already locked out biometry

wultra · Nov 3, 2022 · 3ca11df · 3ca11df
1 parent 26ec65d
commit 3ca11df
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/proj-xcode/PowerAuth2/PowerAuthSDK.m b/proj-xcode/PowerAuth2/PowerAuthSDK.m
@@ -1266,6 +1266,13 @@ - (void) authenticateUsingBiometryImpl:(PowerAuthKeychainAuthentication *)keycha
         return;
     }
 
+    // Check biometric status in advance, do do not increase failed attempts counter
+    // in case that biometry is already locked out.
+    if (![PowerAuthKeychain canUseBiometricAuthentication]) {
+        callback(nil, PA2MakeError(PowerAuthErrorCode_BiometryNotAvailable, nil));
+        return;
+    }
+
     // Use app provided, or create a new LAContext if "prompt" variant is used.
     NSString * prompt = keychainAuthentication.prompt;
     LAContext * context = keychainAuthentication.context;