{"action":"created","issue":{"url":"https://api.github.com/repos/MiniKeePass/MiniKeePass/issues/384","labels_url":"https://api.github.com/repos/MiniKeePass/MiniKeePass/issues/384/labels{/name}","comments_url":"https://api.github.com/repos/MiniKeePass/MiniKeePass/issues/384/comments","events_url":"https://api.github.com/repos/MiniKeePass/MiniKeePass/issues/384/events","html_url":"https://github.com/MiniKeePass/MiniKeePass/issues/384","id":89815242,"number":384,"title":"Database is no longer locked when \"close timeout\" expires! (after last app update)","user":{"login":"volker70","id":7448393,"avatar_url":"https://avatars.githubusercontent.com/u/7448393?v=3","gravatar_id":"","url":"https://api.github.com/users/volker70","html_url":"https://github.com/volker70","followers_url":"https://api.github.com/users/volker70/followers","following_url":"https://api.github.com/users/volker70/following{/other_user}","gists_url":"https://api.github.com/users/volker70/gists{/gist_id}","starred_url":"https://api.github.com/users/volker70/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/volker70/subscriptions","organizations_url":"https://api.github.com/users/volker70/orgs","repos_url":"https://api.github.com/users/volker70/repos","events_url":"https://api.github.com/users/volker70/events{/privacy}","received_events_url":"https://api.github.com/users/volker70/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/MiniKeePass/MiniKeePass/labels/Bug","name":"Bug","color":"e10c02"},{"url":"https://api.github.com/repos/MiniKeePass/MiniKeePass/labels/Pending%20Release","name":"Pending Release","color":"02e10c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-06-20T20:35:08Z","updated_at":"2015-06-27T19:35:25Z","closed_at":null,"body":"I am using MiniKeePass version 1.6.\r\nIt seems to me that after the last app update (including adding TouchID support) the behaviour of the lockout functionality has changed: The \"close timeout\" does no longer work! To me this is a big security issue.\r\nMy use case: I am not using the PIN and thus PIN protection is not activated in my configuration. Instead I always enter the master passphrase every time I want to unlock MiniKeePass. I have set a \"close timeout\" of 2 minutes in MiniKeePass. This allows me to lock my iPhone 5S with the standby key; iOS8 then locks the device immediate and my passwords are safe (I have a long alphanumerical device passphrase). However, I can still unlock the again via TouchID, and if the 2 minutes grace period (\"close timeout\") have not passed yet, then I can - after unlocking the device with TouchID - use MiniKeePass without further authentcation. Which means I do not have to enter the long master passphrase again, should I need to access MiniKeePass once more within those 2 minutes. That works fine for me. However, I rely on the fact the, should I leave the device for more than 2 minutes, MiniKeePass will lock. What I observe now, however, is:\r\n1.) After more than 2 minutes, I can unlock the device using TouchID and then I'm still logged in to MiniKeePass! Which means: Should anybody steal my fingerprint or be able to enter my long device passphrase, then he is also into MiniKeePass. This is definitely not what I want!\r\n2.) I'm not absolutely sure, but to me it seems that the iPhone does not load the battery as long as MiniKeePass is still open in the background. I have to quit MiniKeePass (or at least close the database) in order to be able to load the battery."},"comment":{"url":"https://api.github.com/repos/MiniKeePass/MiniKeePass/issues/comments/116122430","html_url":"https://github.com/MiniKeePass/MiniKeePass/issues/384#issuecomment-116122430","issue_url":"https://api.github.com/repos/MiniKeePass/MiniKeePass/issues/384","id":116122430,"user":{"login":"Finke3","id":13059645,"avatar_url":"https://avatars.githubusercontent.com/u/13059645?v=3","gravatar_id":"","url":"https://api.github.com/users/Finke3","html_url":"https://github.com/Finke3","followers_url":"https://api.github.com/users/Finke3/followers","following_url":"https://api.github.com/users/Finke3/following{/other_user}","gists_url":"https://api.github.com/users/Finke3/gists{/gist_id}","starred_url":"https://api.github.com/users/Finke3/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Finke3/subscriptions","organizations_url":"https://api.github.com/users/Finke3/orgs","repos_url":"https://api.github.com/users/Finke3/repos","events_url":"https://api.github.com/users/Finke3/events{/privacy}","received_events_url":"https://api.github.com/users/Finke3/received_events","type":"User","site_admin":false},"created_at":"2015-06-27T19:35:25Z","updated_at":"2015-06-27T19:35:25Z","body":"@volker70 : The same problem has happen on my iPhone 6 some days ago. I turned Pin protection on and off again, which fixed the problem on my phone. Maybe you can try this as well? But of course that's another bug which I did not mention in my post above. "}}