New in Android Samples: Authenticating to remote servers using the Fingerprint API
Blog post from Google Cloud
Android 6.0 Marshmallow introduced new features for developers, including updates to the Android Fingerprint API, which enhances user privacy and security through hardware-backed cryptographic vaults. A newly released sample, AsymmetricFingerprintDialog, demonstrates integrating fingerprint authentication with remote servers using asymmetric keys, allowing developers to securely authenticate online transactions. This approach involves creating an asymmetric key pair, registering the public key with a server, signing transactions with a fingerprint, and verifying signed transactions on the backend. The sample complements an earlier FingerprintDialog release focused on symmetric keys, showcasing options for securing data both offline and online. Additionally, updates to the Android for Work APIs, such as AppRestrictionEnforcer and AppRestrictionSchema, introduce new restrictions, enhancing the control developers have over app settings in Android 6.0.