[PM-2772] add flag to deter process reload if cancel is clicked on biometrics (#7350)

* add flag to deter process reload if cancel is clicked on biometrics

* rename flag

* store biometrics cancelled to disk instead of integrating with process reload

* allow auto-prompt when opening app

apps/desktop/src/auth/lock.component.ts

@@ -136,6 +136,10 @@ export class LockComponent extends BaseLockComponent {
       return;
     }
 
+    if (await this.stateService.getBiometricPromptCancelled()) {
+      return;
+    }
+
     this.biometricAsked = true;
     if (await ipc.platform.isWindowVisible()) {
       this.unlockBiometric();

apps/desktop/src/main/window.main.ts

@@ -89,6 +89,8 @@ export class WindowMain {
         // This method will be called when Electron is shutting
         // down the application.
         app.on("before-quit", () => {
+          // Allow biometric to auto-prompt on reload
+          this.stateService.setBiometricPromptCancelled(false);
           this.isQuitting = true;
         });
 

libs/angular/src/auth/components/lock.component.ts

@@ -118,6 +118,7 @@ export class LockComponent implements OnInit, OnDestroy {
       return;
     }
 
+    await this.stateService.setBiometricPromptCancelled(true);
     const userKey = await this.cryptoService.getUserKeyFromStorage(KeySuffixOptions.Biometric);
 
     if (userKey) {
@@ -274,6 +275,7 @@ export class LockComponent implements OnInit, OnDestroy {
 
   private async doContinue(evaluatePasswordAfterUnlock: boolean) {
     await this.stateService.setEverBeenUnlocked(true);
+    await this.stateService.setBiometricPromptCancelled(false);
     this.messagingService.send("unlocked");
 
     if (evaluatePasswordAfterUnlock) {

libs/common/src/platform/abstractions/state.service.ts

@@ -177,6 +177,18 @@ export abstract class StateService<T extends Account = Account> {
    * @deprecated For migration purposes only, use setUserKeyBiometric instead
    */
   setCryptoMasterKeyBiometric: (value: BiometricKey, options?: StorageOptions) => Promise<void>;
+  /**
+   * Gets a flag for if the biometrics process has been cancelled.
+   * Process reload occurs when biometrics is cancelled, so we store to disk to prevent
+   * it from reprompting and creating a loop.
+   */
+  getBiometricPromptCancelled: (options?: StorageOptions) => Promise<boolean>;
+  /**
+   * Sets a flag for if the biometrics process has been cancelled.
+   * Process reload occurs when biometrics is cancelled, so we store to disk to prevent
+   * it from reprompting and creating a loop.
+   */
+  setBiometricPromptCancelled: (value: boolean, options?: StorageOptions) => Promise<void>;
   getDecryptedCiphers: (options?: StorageOptions) => Promise<CipherView[]>;
   setDecryptedCiphers: (value: CipherView[], options?: StorageOptions) => Promise<void>;
   getDecryptedCollections: (options?: StorageOptions) => Promise<CollectionView[]>;

libs/common/src/platform/models/domain/account.ts

@@ -267,6 +267,7 @@ export class AccountSettings {
   region?: string;
   smOnboardingTasks?: Record<string, Record<string, boolean>>;
   trustDeviceChoiceForDecryption?: boolean;
+  biometricPromptCancelled?: boolean;
 
   /** @deprecated July 2023, left for migration purposes*/
   pinProtected?: EncryptionPair<string, EncString> = new EncryptionPair<string, EncString>();

libs/common/src/platform/services/state.service.ts

@@ -910,6 +910,24 @@ export class StateService<
     await this.saveSecureStorageKey(partialKeys.biometricKey, value, options);
   }
 
+  async getBiometricPromptCancelled(options?: StorageOptions): Promise<boolean> {
+    const account = await this.getAccount(
+      this.reconcileOptions(options, await this.defaultOnDiskOptions()),
+    );
+    return account?.settings?.biometricPromptCancelled;
+  }
+
+  async setBiometricPromptCancelled(value: boolean, options?: StorageOptions): Promise<void> {
+    const account = await this.getAccount(
+      this.reconcileOptions(options, await this.defaultOnDiskOptions()),
+    );
+    account.settings.biometricPromptCancelled = value;
+    await this.saveAccount(
+      account,
+      this.reconcileOptions(options, await this.defaultOnDiskOptions()),
+    );
+  }
+
   @withPrototypeForArrayMembers(CipherView, CipherView.fromJSON)
   async getDecryptedCiphers(options?: StorageOptions): Promise<CipherView[]> {
     return (