Beyond the general session-timeout issue for post-biometric-unlock state, there is currently no lock screen concept in this app at all — once isOnboarded is true, /tabs/home is fully accessible indefinitely with the app simply resuming in the foreground with no gate whatsoever, biometric or otherwise (there's no auth gate implemented yet at all). Implement an app-level lock screen that engages after configurable backgrounded duration, independent of whatever biometric/PIN gate related issues introduce at the auth-flow level.
Definition of done:
- Lock screen component that intercepts all app content when triggered, mounted at the
_layout.tsx level
- Configurable timeout, sensible default (e.g. immediate lock on background for a wallet, not a lenient timeout)
- Verified it can't be bypassed via Android's back button or iOS gesture navigation
Before opening a PR for this issue, read CONTRIBUTING.md.
This is not a starter-issue. The Definition of done above is the full
acceptance criteria, not a subset to sample from — a PR that addresses part
of it is an unfinished issue, not a smaller one. Your PR must include, in
the PR description itself:
PRs missing these will be sent back before review, not reviewed and rejected — please do this up front.
Beyond the general session-timeout issue for post-biometric-unlock state, there is currently no lock screen concept in this app at all — once
isOnboardedis true,/tabs/homeis fully accessible indefinitely with the app simply resuming in the foreground with no gate whatsoever, biometric or otherwise (there's no auth gate implemented yet at all). Implement an app-level lock screen that engages after configurable backgrounded duration, independent of whatever biometric/PIN gate related issues introduce at the auth-flow level.Definition of done:
_layout.tsxlevelBefore opening a PR for this issue, read CONTRIBUTING.md.
This is not a starter-issue. The Definition of done above is the full
acceptance criteria, not a subset to sample from — a PR that addresses part
of it is an unfinished issue, not a smaller one. Your PR must include, in
the PR description itself:
PRs missing these will be sent back before review, not reviewed and rejected — please do this up front.