flutter_secure_storage_plus 0.1.0

Enhanced secure storage with biometric unlock and key rotation.

Unreleased

0.1.0 - 2025-11-04

Added

• Biometric authentication support - Full biometric protection for read/write operations:
  • iOS/macOS: Face ID and Touch ID integration using LocalAuthentication framework
  • Android: Fingerprint and biometric prompt using BiometricPrompt API
  • Added requireBiometrics parameter to write() and read() methods
  • Biometric-protected items are stored separately with enhanced security
• Key rotation helpers - Transparent encryption key rotation:
  • Added rotateKeys() method to re-encrypt all stored values with new keys
  • Supports both regular and biometric-protected storage
  • Returns count of rotated items
  • Implemented on all platforms (Android, iOS, macOS, Web)
• Enhanced example app with comprehensive biometric and key rotation testing UI
• Added comprehensive library and API documentation to achieve 160/160 pana score

Changed

• Android: Updated MainActivity in example app to use FlutterFragmentActivity for biometric support
• Android: Added androidx.biometric and androidx.fragment dependencies
• Improved error handling for biometric authentication failures
• All code formatted to match Dart formatter standards

Fixed

• Fixed Android compilation errors related to biometric authentication
• Fixed activity context handling for biometric prompts
• Resolved static analysis issues for pub.dev publication

Documentation

• Added library-level documentation with usage examples
• Added constructor documentation for all public classes
• Improved API documentation coverage to 80%+

0.0.5 TBD

Security

• CRITICAL: Fixed security vulnerability - replaced insecure storage implementations with proper secure storage:
  • Android: Now uses EncryptedSharedPreferences (AES-256 encryption) instead of plain SharedPreferences
  • iOS: Now uses Keychain Services instead of UserDefaults (encrypted keychain storage)
  • macOS: Now uses Keychain Services instead of UserDefaults (encrypted keychain storage)
  • Web: Now uses localStorage instead of in-memory Map (persistent storage)
• Added androidx.security:security-crypto dependency for Android encryption
• All platforms now properly encrypt data at rest

Documentation

• Added example GIF to README demonstrating plugin usage

Note: Data stored with previous versions will not be accessible after upgrading. Users will need to re-write their data with the new secure storage implementation.

0.0.4

Changed

• pubspec.yaml cleaned for pub.dev and pana compliance
• No breaking changes, just metadata and publishing fixes

0.0.3

Added

• Full platform support: Android, iOS, Web, Windows, macOS, Linux
• WASM compatible
• Native handlers for write/read/delete on all platforms

Changed

• Example and tests improved

0.0.2 - 2025-08-24

Added

• Add .pubignore to exclude build and example artifacts

Changed

• Prepare for publish
• Update metadata and version

0.0.1 - 2025-08-22

Added

• Initial release
• Multi-platform plugin scaffold (iOS, Android, Web, Windows, macOS, Linux)
• WASM-compatible web implementation placeholder