Preventing Session Copy On Rooted Devices By Encrypting Current Session Files #1192
Description
New Feature / Enhancement Checklist
- I am not disclosing a vulnerability.
- I am not just asking a question.
- I have searched through existing issues.
Current Limitation
Currently the SDK saved cached user session as clear text files.
Feature / Enhancement Description
Encrypting cached user sessions using Jetpack security features to prevent session copy on rooted devices.
Alternatives / Workarounds
No workarounds at the moment.
3rd Party References
I found this gist which provides a good way for testing encryption methods on Robolectric.