# Biocertification

Weixin Mini Program The following biometric authentication methods are available through SOTER .

Currently only fingerprint recognition is supported.Device-supported biometric authentication methods are available using wx.checkIsSupportSoterAuthentication

# Calling Process

# Process Steps Dxplaination

1. Call wx.startSoterAuthentication , getresultJSONandresultJSONSignature

2. (Optional) Signature verification.HereresultJSONSignatureuses SHA256withRSA / PSS as a signature algorithm for checking signatures.This formula is mathematically defined as follows:bool result = verify (original string used to sign, signature string, public key to verify the signature)

3. WeChat provides a back-end interface for trusted key verification services, and WeChat will guarantee the correctness and reliability of the verification results returned by the interface, and for Android root scenarios the interface has the above characteristics (will return whether or not root scenario security is guaranteed).

Interface address:

POST http://api.weixin.qq.com/cgi-bin/soter/verify_signature?access_token=%access_token

Post data content (JSON encoding):

{"openid":"$openid", "json_string" : "$resultJSON", "json_signature" : "$resultJSONSignature" }

Request to return data content (JSON encoding):

// Verification returned successfully
{"is_ok":true}
// Validation failure returns
{"is_ok":false}
// Interface call failed
{"errcode":"xxx,"errmsg":"xxxxx"}