bug: App only requires pin sometimes

[snairolf]

Bug type

Error at runtime

App version

5.3.6

Device environment

iOS 17.5.1 iPhone 14 Pro Max

Bug description

I’ve turned app security on with PIN. The app sometimes doesn’t ask for the PIN confirmation, especially also even after the phone has been locked. It always asks however after it was force closed.

I would expect it to always ask when the app is opened.

Solution

No response

Additional context

No response

Acknowledgements

• This issue is not a duplicate of an existing bug report.
• I understand that security vulnerabilities should be reported to security@2fas.com instead of on GitHub.
• I have chosen an appropriate title.
• All requested information has been provided properly.

[adocyn]

@snairolf Do you have FaceID enabled? Because when the app doesn't ask for PIN it's usually because FaceID authorised user before.

[snairolf]

I do have it enabled at the iPhone level, but not specifically for 2fas.

[tandrej98]

The issue is reproducible with pin login as well. When minimized the app stays unlocked. I would expect the app to lock itself when minimised as all the other apps of this type I used. Maybe adding a timeout setting would be useful?