don't clear key needed for bio/auto migration in pin migration (#2721)

(cherry picked from commit 819aabb)
bitwarden · Aug 25, 2023 · 8c58ed5 · 8c58ed5
1 parent f489947
commit 8c58ed5
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/src/Core/Services/CryptoService.cs b/src/Core/Services/CryptoService.cs
@@ -1011,6 +1011,10 @@ private async Task MigrateAutoAndBioKeysIfNeededAsync(string userId = null)
             // Decrypt
             var masterKey = new MasterKey(Convert.FromBase64String(oldKey));
             var encryptedUserKey = await _stateService.GetEncKeyEncryptedAsync(userId);
+            if (encryptedUserKey == null)
+            {
+                return;
+            }
             var userKey = await DecryptUserKeyWithMasterKeyAsync(
                 masterKey,
                 new EncString(encryptedUserKey),
@@ -1070,8 +1074,11 @@ private async Task MigrateAutoAndBioKeysIfNeededAsync(string userId = null)
                 var encPin = await EncryptAsync(pin, userKey);
                 await _stateService.SetProtectedPinAsync(encPin.EncryptedString);
             }
-            // Clear old key
-            await _stateService.SetEncKeyEncryptedAsync(null);
+            // Clear old key only if not needed for bio/auto migration
+            if (await _stateService.GetKeyEncryptedAsync() != null)
+            {
+                await _stateService.SetEncKeyEncryptedAsync(null);
+            }
             return userKey;
         }