Preventing Session Copy On Rooted Devices By Encrypting Current Session Files

[DrMimik]

New Feature / Enhancement Checklist

• I am not disclosing a vulnerability.
• I am not just asking a question.
• I have searched through existing issues.

Current Limitation

Currently the SDK saved cached user session as clear text files.

Feature / Enhancement Description

Encrypting cached user sessions using Jetpack security features to prevent session copy on rooted devices.

Alternatives / Workarounds

No workarounds at the moment.

3rd Party References

I found this gist which provides a good way for testing encryption methods on Robolectric.

[parse-github-assistant]

Thanks for opening this issue!

• 🎉 We are excited about your ideas for improvement!