ios - 不使用 Touch ID 登录

Question

是否可以在应用程序中使用 Touch ID 传感器但不能用于登录身份验证？在应用程序中，用户可以扫描另一个人的手指。然后将指纹与数据库进行匹配，以找到该人的个人资料。

Answer 1

答案是否定的。引用:https://www.noknok.com/what-they-say/blog/apple-touch-id-app-for-mobile-fingerprint-authentication

So, is Apple’s Touch ID API the answer to our online authentication needs? Currently, the API provides only two capabilities:

1. The ability to determine if the user was successfully authenticated to the device using the fingerprint sensor.
2. The ability to unlock iOS keychain data with successful fingerprint authentication.

While both capabilities offer local authentication, they do not provide a mechanism for the application or the user to authenticate to a remote server. App developers looking to implement remote authentication must create their own solution.

但是，您可以按如下方式进行:

One mechanism to accomplish remote authentication is by using the Touch ID Keychain API to store passwords. A successful fingerprint authentication will unlock the password, allowing the app to use the password to authenticate to the server on behalf of the user. While quick and simple, this method still retains many of the legacy security problems of passwords including the vulnerability to large scale server side attacks on password databases. The user also bears the burden of keeping passwords in sync between the iOS keychain and the server, raising the possibility of significant user confusion and friction.