Skip to content

microG doesn't prompt user for identity verification before allowing Google Account sign in. #3412

@TheGamerKing561

Description

@TheGamerKing561

Describe the bug
When adding a Google Account in microG on a device that has a screen lock set (PIN, Pattern, Password, etc), microG allows the user to add a Google Account and goes to the sign in page without asking for user authorization (entering screen lock).

To Reproduce
Steps to reproduce the behavior:

  1. Ensure that a screen lock is set (PIN, Pattern, Password, etc)
  2. Open microG Settings
  3. Tap "Google Accounts"
  4. Tap "Add Google account"

microG then goes to the Google Account sign in page without prompting user for identity verification (entering screen lock).

Expected behavior
microG tells the system to show a screen to prompt user to confirm their screen lock before going to the Google Account sign in screen.

Screenshots
Not applicable

System
Android Version: 16
Custom ROM: LineageOS 23.0

Additional context
On a device that has normal Google Play Services, the system asks the user to confirm identity by entering their screen lock or using biometrics before allowing the user to go to sign in page. This behavior doesn't happen on microG, and it should be added for security to ensure the device owner is who's adding a Google account.

I believe adding it should be easy, but sadly I don't have knowledge to implement it myself.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions