Skip to content
This repository has been archived by the owner on Jun 20, 2023. It is now read-only.

Vaccination Certificate in Wallet (iOS) #2965

Closed
kevin-kraus opened this issue May 6, 2021 · 143 comments
Closed

Vaccination Certificate in Wallet (iOS) #2965

kevin-kraus opened this issue May 6, 2021 · 143 comments
Assignees
Labels
declined This feature request won't be implemented feature request A new feature proposal for the app mirrored-to-jira This item is also tracked internally in JIRA wontfix This will not be worked on

Comments

@kevin-kraus
Copy link

Feature description

Show a pass in Wallet on iOS for quick access in certain situations by just double clicking the side- / home button.

For example if in the future the case arises that you need a proof of vaccination for certain places to enter (e.g. restaurants), you could access the vaccination certificate quicker by using the wallet shortcuts than searching the CWA and opening the tab for the certificate there.

Problem and motivation

User acceptance, simplicity of use and speed of processing for entry controls increase.

Is this something you're interested in working on

No


Internal Tracking ID: EXPOSUREAPP-7811

@Ein-Tim
Copy link
Contributor

Ein-Tim commented May 6, 2021

I'd suggest to open this issue in https://github.com/eu-digital-green-certificates/dgca-wallet-app-ios, since I don't expect that CWA will implement any features of the vaccination certificate which the DGCA doesn't have.

@jucktnich
Copy link

I do think, that the scanning implementation should be done by the dgca (if it's even possible), but the CWA could add a wallet card by its own.

@Ein-Tim
Copy link
Contributor

Ein-Tim commented Jun 8, 2021

This is now also tracked in eu-digital-green-certificates/dgca-wallet-app-ios#69.

@muuuh
Copy link

muuuh commented Jun 9, 2021

Please note that having to unlock the phone for opening the app and potentially handing out the phone is a privacy issue (reading mails, photos).

On the other hand, when the vaccination certificate is in the ios wallet, the vaccination information (owners name?) can be accessed by anybody with access to the phone (without need to unlock).

@dsarkar
Copy link
Member

dsarkar commented Jun 11, 2021

@ezadoo
Copy link

ezadoo commented Jun 11, 2021

As title of this feature-request says that vaccination certificates should be possible to import into Apple Wallet I would like to mention that also the (negative) results of rapid antigen tests could (and should) be able to import into Wallet too.

As I think much of the background-processes for creating the wallet passes would be similar, I don't want to create an additional feature-request, with this fairly similar topic, but maybe the rapid test results could be tracked in this thread too.

@kevin-kraus
Copy link
Author

kevin-kraus commented Jun 11, 2021

As title of this feature-request says that vaccination certificates should be possible to import into Apple Wallet I would like to mention that also the (negative) results of rapid antigen tests could (and should) be able to import into Wallet too.

As I think much of the background-processes for creating the wallet passes would be similar, I don't want to create an additional feature-request, with this fairly similar topic, but maybe the rapid test results could be tracked in this thread too.

I like your proposal as it would further more improve access speed to the information. Also, Apple Wallet Cards have a "expiring" timestamp AFAIK (See "expirationDate" here)so they could also be deleted/invalidated automatically.

I would consider creating a new issue. Your proposal is requesting changes in an other module. Therefore it has no direct connection to this issue.

@achisto
Copy link

achisto commented Jun 11, 2021

Wouldn't any app that lets your create Apple Wallet Passes be sufficient for solving this problem? There are multiple apps that can create wallet passes from any qr-code (or barcode) you give them. And in the end the qr-code you receive after your vaccination is just that - a qr-code. 🤔

@Ein-Tim
Copy link
Contributor

Ein-Tim commented Jun 12, 2021

For your information: eu-digital-green-certificates/dgca-wallet-app-ios#69 (comment) says:

Unfortunately, this is a security and privacy concern, as already discussed in the CWA GitHub. As this would allow the QR code to be visible without any sort of user validation / passcode. We have discussed this internally and came to the conclusion to not implement it because of the security concerns and that it is out of scope.

So I would not expect any development on this, sorry.

@kevin-kraus
Copy link
Author

For your information: eu-digital-green-certificates/dgca-wallet-app-ios#69 (comment) says:

Unfortunately, this is a security and privacy concern, as already discussed in the CWA GitHub. As this would allow the QR code to be visible without any sort of user validation / passcode. We have discussed this internally and came to the conclusion to not implement it because of the security concerns and that it is out of scope.

So I would not expect any development on this, sorry.

@Ein-Tim you probably could add a disclaimer that privacy is not ensured by using this feature.

Otherwise what I'm asking myself now, the privacy is also not ensured when a user is using a device not secured by any passcode / biometric authentication. Or am I wrong here?
Therefore a user with no passcode should not be allowed to use the vaccination / rapid test features, right?

@Ein-Tim
Copy link
Contributor

Ein-Tim commented Jun 12, 2021

@kevin-kraus

Since I'm also only a community member, I suggest that you add your comment to eu-digital-green-certificates/dgca-wallet-app-ios#69.

Otherwise what I'm asking myself now, the privacy is also not ensured when a user is using a device not secured by any passcode / biometric authentication. Or am I wrong here?
Therefore a user with no passcode should not be allowed to use the vaccination / rapid test features, right?

I think the difference here is that the user can protect his vaccination certificate & rapid tests in the app if he wants to, but he can't protect the Apple Wallet even if he wants to...

Edit: Apparently I was wrong with that, see eu-digital-green-certificates/dgca-wallet-app-ios#69 (comment).

@jucktnich
Copy link

@muuuh 1. You can disable access from Lock Screen and 2. you can only access cards which work with Apple Pay from the lockscreen https://support.apple.com/en-us/HT204003

@kevin-kraus
Copy link
Author

kevin-kraus commented Jun 12, 2021

Okay from the comments that I'm seeing in eu-digital-green-certificates/dgca-wallet-app-ios corona-warn-app/cwa-wishlist#69 there will be no implementation of this feature in the EU context. Otherwise will it still be implemented in the CWA? Because I cannot see any direct links between the whole EU-Certificate stuff and the CWA. Even if the EU don't want to implement it, doesn't necessarily mean that it won't be integrated into CWA.

I think that it will make a good impact for faster usage of the vaccination certificate. Even today we can see that the certificate will be needed to provide proof in more and more places daily (restaurants, events etc.). The CWA only displays the vaccination QR code. Therefore it should be relatively easy to just copy that QR-Code and insert it into a wallet pass.

Regarding the security/privacy issues I think we should give the user a explicit warning that private data could be exposed if they are using no passcode or do not turn off "Access to pass on lockscreen" in the settings. After checking that they have read the risk warning and accept the risk the user should have the choice to use the feature or not. Please stop the paternalism regarding privacy. If the user knows about the risk they should be in control if they accept it or not.

So, can we expect an implementation in CWA? @maugst

@muuuh
Copy link

muuuh commented Jun 12, 2021

@jucktnich

I wrote:

Please note that having to unlock the phone for opening the app and potentially handing out the phone is a privacy issue (reading mails, photos).

On the other hand, when the vaccination certificate is in the ios wallet, the vaccination information (owners name?) can be accessed by anybody with access to the phone (without need to unlock).

You wrote:

@muuuh 1. You can disable access from Lock Screen and 2. you can only access cards which work with Apple Pay from the lockscreen https://support.apple.com/en-us/HT204003

Don't get me wrong. I'm in favor of an option to show the vaccination status in Apple Wallet.

I wanted to point out that both in terms of implementation and non-implementation you can argue with "data protection"/security (i.e. confidentiality).

I think that a conscious setting is necessary in which the user is again made aware of the consequences. With that, it should then be sufficient.

Still, I consider an implementation through third-party apps (unsure if the qr-code format fits) or saving the QR code as lockscreen background as a workaround.

@jucktnich
Copy link

@muuuh Dunno why i wrote this 😅

@ezadoo
Copy link

ezadoo commented Jun 12, 2021

@kevin-kraus

I would consider creating a new issue. Your proposal is requesting changes in an other module. Therefore it has no direct connection to this issue.

As there are currently discussed mainly the privacy concerns and possibilities of integrating the support of Apple Wallet in general I'am refraining from creating a second issue for rapid tests as it would be very similar topic, until a final decision regarding this topic in general is made.

But maybe we could keep the possibility of integrating rapid tests in a similar way too it the back of our minds.

@iMonZ
Copy link

iMonZ commented Jun 13, 2021

It would be great if we could clear this up quickly! It’s already pretty late for this feature and if we wait further maybe we don’t need it anymore.
I just don’t see any progression. But vaccinations and negative tests should be in the apple wallet or if this doesn’t work at least as an Apple Watch app!

@riconeitzel
Copy link

I chime in here! Would be a HUGH step towards broad anticipation! double-plus-thumbs-up

@Ein-Tim
Copy link
Contributor

Ein-Tim commented Jun 14, 2021

But honestly, if it's not possible to show the QR-Code from the Lock Screen via Apple Wallet (see eu-digital-green-certificates/dgca-wallet-app-ios#69 (comment)) then I don't see a benefit that huge...

Still it would be nice to have!

Edit: Maybe that with the Lock Screen is maybe not true, investigating...

@Ein-Tim
Copy link
Contributor

Ein-Tim commented Jun 14, 2021

FYI: If you want your QR-Code in your Apple Wallet now, take a look at: https://twitter.com/kkrdvc/status/1404418854231674885

@Nils-witt
Copy link

You can choose if can access the wallet when the device is locked.
Here is a screenshot of the setting for it
IMG_1939615639D5-1

@jucktnich
Copy link

@Ein-Tim the benefit would be fe that you can use the pass on the watch

@jucktnich
Copy link

@Nils-witt afaik that's still not possible with cards not using Apple Pay and you also don't have triggers which would lead the pass to appear on the lockscreen as a message

@Nils-witt
Copy link

Nils-witt commented Jun 14, 2021

Yes, there is no notification or similar to direct access a specific card in this case. But with double click on the home button the wallet requires biometrics(depending on your settings) before it shows any cards and then you can browse all of your cards.

EDIT: The switch for "Wallet" enables the biometric requirement (in the picture: it is disabled)

@heinezen heinezen transferred this issue from corona-warn-app/cwa-wishlist Jun 17, 2021
@cwa-bot cwa-bot bot added this to ToDo in [CM] cwa-app-ios Jun 17, 2021
@heinezen heinezen added feature request A new feature proposal for the app mirrored-to-jira This item is also tracked internally in JIRA labels Jun 17, 2021
@cwa-bot cwa-bot bot moved this from ToDo to Mirrored to Jira in [CM] cwa-app-ios Jun 17, 2021
@Ein-Tim
Copy link
Contributor

Ein-Tim commented Jan 30, 2022

It seems like Apple fixed the "Not checked" for Germany, now the entries show up as "Checked - Signature valid".

@Kamik423
Copy link

Still does not work for me.

@iMonZ
Copy link

iMonZ commented Jan 30, 2022

It seems like Apple fixed the "Not checked" for Germany, now the entries show up as "Checked - Signature valid".

Doesn’t work for me.
Have you rescanned your certificate or just keep the already scanned one?

@Ein-Tim
Copy link
Contributor

Ein-Tim commented Jan 30, 2022

@Kamik423 & @iMonZ

I just scanned one of my certificates in and left it in the Health app for some days and this evening I was able to add it to the Wallet.

@iMonZ
Copy link

iMonZ commented Jan 30, 2022

@Kamik423 & @iMonZ

I just scanned one of my certificates in and left it in the Health app for some days and this evening I was able to add it to the Wallet.

Thanks.
Good to know.

@kevin-kraus
Copy link
Author

@Ein-Tim
Have you received a push notification or some other kind of notification as soon as your signatures were validated and you were able to add the certificates to your wallet?

Or did you just check every once in a while and at some point they were verified?

@Ein-Tim
Copy link
Contributor

Ein-Tim commented Jan 31, 2022

@kevin-kraus

I did not receive a push notification but I just checked the Health app and at some point the button to add it to the Wallet was blue.

@iMonZ
Copy link

iMonZ commented Jan 31, 2022

@kevin-kraus

I did not receive a push notification but I just checked the Health app and at some point the button to add it to the Wallet was blue.

Great! It worked now!
I just opened health (hadn’t killed it this time so I kept it open) and it just got blue!
Sad thing I tried it and the security women used a Samsung a21 and it couldn’t scan it. She asked me: could you make it bigger.
I sayd not that is not possible. But after like 20 seconds it still worked!
Next thing would be Covid tests for 2g+ dear apple.

@GunniBusch
Copy link

I had no problems with scanning. It always worked even with the we code on a 32 mm Apple Watch

@idoodler
Copy link

idoodler commented Jan 31, 2022

@kevin-kraus

I did not receive a push notification but I just checked the Health app and at some point the button to add it to the Wallet was blue.

Great! It worked now!

I just opened health (hadn’t killed it this time so I kept it open) and it just got blue!

Sad thing I tried it and the security women used a Samsung a21 and it couldn’t scan it. She asked me: could you make it bigger.

I sayd not that is not possible. But after like 20 seconds it still worked!

Next thing would be Covid tests for 2g+ dear apple.

You are able to also add PCR tests to Apple Health.

image

@Ein-Tim
Copy link
Contributor

Ein-Tim commented Jan 31, 2022

@kevin-kraus

You can add all types of EU DCCs.

@kaystrobach
Copy link

Just found out, that the App of the Techniker Krankenkasse is able to read the QR codes and pushes them into the apple wallet if wanted. So there is an option to solve that in the CWA if wanted. GDPR is no problem here.

@iMonZ
Copy link

iMonZ commented Feb 9, 2022

Just found out, that the App of the Techniker Krankenkasse is able to read the QR codes and pushes them into the apple wallet if wanted. So there is an option to solve that in the CWA if wanted. GDPR is no problem here.

Or just update to iOS 15.4, then open the camera app and scan the code.
Done.
Easiest way ever

@iMonZ
Copy link

iMonZ commented Feb 9, 2022

@kevin-kraus

I did not receive a push notification but I just checked the Health app and at some point the button to add it to the Wallet was blue.

Great! It worked now!
I just opened health (hadn’t killed it this time so I kept it open) and it just got blue!
Sad thing I tried it and the security women used a Samsung a21 and it couldn’t scan it. She asked me: could you make it bigger.
I sayd not that is not possible. But after like 20 seconds it still worked!
Next thing would be Covid tests for 2g+ dear apple.

You are able to also add PCR tests to Apple Health.

image

How? This unfortunately doesn’t work for me.
I got an CWA Link for the Test

@Ein-Tim
Copy link
Contributor

Ein-Tim commented Feb 9, 2022

@iMonZ If you have a test certificate (like a vaccination certificate) just scan it with the native iOS camera and it opens in health.

@treysis
Copy link

treysis commented Feb 9, 2022

@kaystrobach It isn't a GDPR problem but a problem of RKI's lawyers and the management decision not to revise the legal decisions.

@Ein-Tim
Copy link
Contributor

Ein-Tim commented Mar 8, 2022

FYI: iOS 15.4 is now in RC status: https://developer.apple.com/news/releases/?id=03082022d

I guess we can expect a public release in the next 7-10 days.

@Ein-Tim
Copy link
Contributor

Ein-Tim commented Mar 14, 2022

So, iOS 15.4 has now been released to the public: https://developer.apple.com/news/releases/?id=03142022d

@Hanashi
Copy link

Hanashi commented Mar 14, 2022

So, iOS 15.4 has now been released to the public: https://developer.apple.com/news/releases/?id=03142022d

Nice, now we can remove CWA and CovPass.

@Ein-Tim
Copy link
Contributor

Ein-Tim commented Mar 14, 2022

@Hanashi

Please think about removing CWA, it offers many other features, including bluetooth and check-in based contact tracing.
iOS does not do that (-;

@iMonZ
Copy link

iMonZ commented Mar 14, 2022

@Hanashi

Please think about removing CWA, it offers many other features, including bluetooth and check-in based contact tracing. iOS does not do that (-;

Not really.
Most features you don’t need anymore.
Most people only need a place for the certificate which is the wallet
And for the test there is no standardized QR code so you just need a pdf or picture or text where it says that you were tested.

so yeah you can uninstall the CWA app and definitely the CovPass App (that was useless in the first place)

@treysis
Copy link

treysis commented Mar 14, 2022

@iMonZ but neither contact tracing nor check-in.

@iMonZ
Copy link

iMonZ commented Mar 14, 2022

@iMonZ but neither contact tracing nor check-in.

Which both you don’t need anymore

@treysis
Copy link

treysis commented Mar 14, 2022

Why not? You can also get the result of PCR tests much faster. And if positive test, you can warn others. Why don't we need this anymore?

@iMonZ
Copy link

iMonZ commented Mar 14, 2022

Why not? You can also get the result of PCR tests much faster. And if positive test, you can warn others. Why don't we need this anymore?

actually you just get the results over Email
And btw you can add you pcr test to iOS as well and get there the notification ;)

@treysis
Copy link

treysis commented Mar 14, 2022

PCR test? I got mine in the app, was very convenient.
Still useful for contact tracing and check-ins.

@iMonZ
Copy link

iMonZ commented Mar 14, 2022

PCR test? I got mine in the app, was very convenient.
Still useful for contact tracing and check-ins.

I just test myself a few times a week and that’s it.
No need for contact tracing. Haven’t needed to use the checkin feature for a year aswell.
So yeah find yourself explanations for useless features.
The CWA was really good made.
I checked to source code so props on that maybe one of the best apps Germany has ever made. But the time has come to archive this projects.

@Ein-Tim
Copy link
Contributor

Ein-Tim commented Mar 14, 2022

I suggest to stay on topic here & be happy about the iOS 15.4 release. (-;

It is certainly discussable what is necessary and what not, but I think this is a decision everyone should make for themselves.

If you want to discuss the use of CWA in this state of the pandemic, I suggest to open a new issue in the wishlist/documentation repo.

@treysis
Copy link

treysis commented Mar 14, 2022

So yeah find yourself explanations for useless features.

Useless for you...

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
declined This feature request won't be implemented feature request A new feature proposal for the app mirrored-to-jira This item is also tracked internally in JIRA wontfix This will not be worked on
Projects
Development

No branches or pull requests