rspec/rules/S6293/java/rule.adoc

include::../description.adoc[]

== Sensitive Code Example

A ``++CryptoObject++`` is not used during authentication: 

[source,java]
----
// ...
BiometricPrompt biometricPrompt = new BiometricPrompt(activity, executor, callback);
// ...
biometricPrompt.authenticate(promptInfo); // Noncompliant
----

== Compliant Solution

A ``++CryptoObject++`` is used during authentication: 

[source,java]
----
// ...
BiometricPrompt biometricPrompt = new BiometricPrompt(activity, executor, callback);
// ...
biometricPrompt.authenticate(promptInfo, new BiometricPrompt.CryptoObject(cipher)); // Compliant

----

include::../see.adoc[]