Always reset the LAContext if we're trying to force a biometric prompt (#595)

jhaven-stytch · web-flow · commit f8f6e36a41b5 · 2026-01-23T12:57:30.000-05:00
diff --git a/Sources/StytchCore/StytchClient/Biometrics/StytchClient+Biometrics.swift b/Sources/StytchCore/StytchClient/Biometrics/StytchClient+Biometrics.swift
@@ -115,6 +115,8 @@ public extension StytchClient {
             }
 
             if parameters.shouldEvaluatePolicyOnRegister == true {
+                LocalAuthenticationContextManager.laContext = LAContext()
+                LocalAuthenticationContextManager.updateLaContextStrings(strings: parameters.promptStrings)
                 guard try await LocalAuthenticationContextManager.localAuthenticationContext.evaluatePolicy(parameters.accessPolicy, localizedReason: parameters.promptStrings.localizedReason) else {
                     throw StytchSDKError.biometricAuthenticationFailed
                 }
@@ -164,10 +166,11 @@ public extension StytchClient {
             guard let privateKeyRegistrationQueryResult: KeychainQueryResult = try keychainClient.getQueryResults(item: .privateKeyRegistration).first else {
                 throw StytchSDKError.noBiometricRegistration
             }
+            LocalAuthenticationContextManager.laContext = LAContext()
+            LocalAuthenticationContextManager.updateLaContextStrings(strings: parameters.promptStrings)
             guard try await LocalAuthenticationContextManager.localAuthenticationContext.evaluatePolicy(.deviceOwnerAuthenticationWithBiometrics, localizedReason: parameters.promptStrings.localizedReason) else {
                 throw StytchSDKError.biometricAuthenticationFailed
             }
-            LocalAuthenticationContextManager.updateLaContextStrings(strings: parameters.promptStrings)
 
             try copyBiometricRegistrationIDToKeychainIfNeeded(privateKeyRegistrationQueryResult)
 

Original file line number	Diff line number	Diff line change
`@@ -115,6 +115,8 @@ public extension StytchClient {`
`115`	`115`	`}`
`116`	`116`
`117`	`117`	`if parameters.shouldEvaluatePolicyOnRegister == true {`
	`118`	`+ LocalAuthenticationContextManager.laContext = LAContext()`
	`119`	`+ LocalAuthenticationContextManager.updateLaContextStrings(strings: parameters.promptStrings)`
`118`	`120`	`guard try await LocalAuthenticationContextManager.localAuthenticationContext.evaluatePolicy(parameters.accessPolicy, localizedReason: parameters.promptStrings.localizedReason) else {`
`119`	`121`	`throw StytchSDKError.biometricAuthenticationFailed`
`120`	`122`	`}`
`@@ -164,10 +166,11 @@ public extension StytchClient {`
`164`	`166`	`guard let privateKeyRegistrationQueryResult: KeychainQueryResult = try keychainClient.getQueryResults(item: .privateKeyRegistration).first else {`
`165`	`167`	`throw StytchSDKError.noBiometricRegistration`
`166`	`168`	`}`
	`169`	`+ LocalAuthenticationContextManager.laContext = LAContext()`
	`170`	`+ LocalAuthenticationContextManager.updateLaContextStrings(strings: parameters.promptStrings)`
`167`	`171`	`guard try await LocalAuthenticationContextManager.localAuthenticationContext.evaluatePolicy(.deviceOwnerAuthenticationWithBiometrics, localizedReason: parameters.promptStrings.localizedReason) else {`
`168`	`172`	`throw StytchSDKError.biometricAuthenticationFailed`
`169`	`173`	`}`
`170`		`- LocalAuthenticationContextManager.updateLaContextStrings(strings: parameters.promptStrings)`
`171`	`174`
`172`	`175`	`try copyBiometricRegistrationIDToKeychainIfNeeded(privateKeyRegistrationQueryResult)`
`173`	`176`