Status-react: Keycard sign in – Don't ask for the Keycard all the time to sign in

[andmironov]

_Part of #9264 keycard sign in epic (mark as checked there, when closing this issue)_
_Replacing https://github.com/status-im/status-react/issues/8180 with this new issue_

The user should be able to choose not to be asked for the Keycard to sign in all the time. This should be done using the same way currently "Save password" feature works, for non-keycard keys in Status.

• The should be a checkbox during sign in. I suggest it to be called. Don’t ask for the card all the time with a description below If you don't want to be asked to tap the card each time you open Status;
• If the user checks that checkbox, we should ask to enable biometric sign in for additional security;
• On iOS "biometric check" might be Face ID or Touch ID depending on the device. On Android afaik it's only possible to use fingerprint;
• This Don’t ask for the card all the time checkbox should be disabled during device-to-card interaction process;
• There should be a way to disable and re-enable biometric sign in in the settings;
• If the Don’t ask for the card all the time feature is enabled as well as the biometric sign in, the sign in should happen with a biometric check. If it fails, the user should be offered to sign in using the passcode + Keycard tap;
• If the user unchecks the checkbox, when the biometric has been enabled before, we should show a popup and warn that it will be disabled now;
• The num pad should have an additional key (Face ID or fingerprint icon)
• This should work on small screens as well, see https://github.com/status-im/status-react/issues/9353 for additional specifications;

Checkbox + Enable biometric

SIgn in when biometric is enabled

Disbaling Don’t ask for the card all the time

Figma:
All the flows are described here, see flows number 6 and 7
https://www.figma.com/file/dEIljL7UPbXgsZUA0Q4qlE5E/Onboarding?node-id=4566%3A12

[guylouis]

this one is high priority from a user experience stand point, since login with keycard all the time is a irl pain !

[rasom]

On iOS "biometric check" might be Face ID or Touch ID depending on the device.

Don't forget that iOS part is kind of irrelevant for those tasks.

[andmironov]

Don't forget that iOS part is kind of irrelevant for those tasks.

It is for now but should be kept in mind that the copy + icon ("Fingerprint"+ fingerprint icon) might change depending on the device in the future

[rasom]

@andmironov @guylouis
I'm not sure the whole thing as it is formulated at the moment makes sense. Currently we can neither decrypt user's database nor start listening for incoming messages without keycard, so I don't think that it actually makes sense to be able to log into the app without using the keycard. We can store PIN if user doesn't want to enter it, but card will still be needed.

[guylouis]

As discussed and agreed in #keycard channel, the encryption key m / 43' / 60' / 1581' / 1' / 0 can be stored on the phone when the user selects the 'don't ask for card all the time ' option

[rasom]

@andmironov @guylouis
We still don't have touch/Face ID login implemented in our app, so for the first version i would prefer to have just a checkbox with label like "Don't ask password on next login", similar to what we have for on-device account, and then on the next iteration add touch/Face ID.

Does it sound good enough?

[guylouis]

@rasom seems good to me

[rasom]

@andmironov
Currently it possible to connect card to device at step 1 screen and then on entering pin you will be logged into account without step 2 screen shown at all. Can we somehow move that checkbox to step 1? Because there's a chance user will never see that option.

[andmironov]

@rasom you mean the user will never see it if it’s on? If yes, I believe it’s safe to say this should be handled in settings (turning the biometric sign in off)

I understand the reason to put the checkbox to ‘step 1’ thought but it’s hard to fit it in there now.

On the other hand, we will have to do it eventually if we’re going to implement the new card interaction design (https://github.com/status-im/status-react/issues/9365), where there’s no ‘step 2’ at all :-) So please let me try to do it, I need some time.

[andmironov]

We might go with this, showing the popup when the checkbox is checked

cc @rasom

[rasom]

@andmironov biometric auth is not mandatory when we save password for a regular acc (and it is kind of hidden in settings, that's why i had no idea about it till yesterday), should we have a parity here with a keycard account?

[andmironov]

It's not, but for the regular sign in it should work the same (show a popup asking if the user wants to enable biometric), it just has not been implemented yet (i don't know why and i don't know what's the plan)

Please see all the sign in screens here https://www.figma.com/file/dEIljL7UPbXgsZUA0Q4qlE5E/Onboarding?node-id=4566%3A12

[guylouis]

cc @rachel for last remark about last remark about signin