tauri-plugins-workspace/plugins/biometric

Prompt the user for biometric authentication on Android, iOS and macOS. On Android, it also allows encrypting and decrypting data with keys protected by biometric authentication.

Platform	Supported
Linux	x
Windows	x
macOS	✓
Android	✓
iOS	✓ (no biometric cryptography)

Install

This plugin requires a Rust version of at least 1.65

There are three general methods of installation that we can recommend.

1. Use crates.io and npm (easiest, and requires you to trust that our publishing pipeline worked)
2. Pull sources directly from Github using git tags / revision hashes (most secure)
3. Git submodule install this repo in your tauri project and then use file protocol to ingest the source (most secure, but inconvenient to use)

Install the Core plugin by adding the following to your Cargo.toml file:

src-tauri/Cargo.toml

[dependencies]
tauri-plugin-biometric = "2.0.0"
# alternatively with Git:
tauri-plugin-biometric = { git = "https://github.com/tauri-apps/plugins-workspace", branch = "v2" }

You can install the JavaScript Guest bindings using your preferred JavaScript package manager:

pnpm add @tauri-apps/plugin-biometric
# or
npm add @tauri-apps/plugin-biometric
# or
yarn add @tauri-apps/plugin-biometric

Usage

First you need to register the core plugin with Tauri:

src-tauri/src/lib.rs

fn main() {
    tauri::Builder::default()
        .plugin(tauri_plugin_biometric::init())
        .run(tauri::generate_context!())
        .expect("error while running tauri application");
}

Afterwards all the plugin's APIs are available through the JavaScript guest bindings:

import {
  checkStatus,
  authenticate,
  biometricCipher
} from '@tauri-apps/plugin-biometric'

const status = await checkStatus()
if (status.isAvailable) {
  await authenticate('Open your wallet')
}

// ... or using biometric-protected cryptography:
if (status.isAvailable) {
  const encryptOptions = {
    dataToEncrypt: getData()
  }
  const encrypted = await biometricCipher(
    'Login without typing password',
    encryptOptions
  )

  const decryptOptions = {
    dataToDecrypt: encrypted.data
  }
  const originalData = await biometricCipher(
    'Login without typing password',
    decryptOptions
  )
}

Permissions

The default permission set (biometric:default) only allows status and authenticate. To use biometricCipher, add the biometric:allow-biometric-cipher permission to your capability:

{
  "permissions": ["biometric:default", "biometric:allow-biometric-cipher"]
}

Contributing

PRs accepted. Please make sure to read the Contributing Guide before making a pull request.

Contributed By

Partners

For the complete list of sponsors please visit our website and Open Collective.

License

Code: (c) 2015 - Present - The Tauri Programme within The Commons Conservancy.

MIT or MIT/Apache 2.0 where applicable.