่ทณๅˆฐไธป่ฆๅ†…ๅฎน

Camera Automatically Turns On When Clicking โ€œReceiveโ€ in DID Wallet

JM โ€œcryptotestnetโ€ Morales
ๆ”ฏๆŒ
did-walletbugcant-reprosecurityux

๐Ÿ“ฑ App: DID Wallet ๐Ÿ“‚ Feature: Receive Tokens / QR Scanner ๐Ÿ“… Environment: Mobile App (Latest Version) ๐Ÿ”— Related: Privacy / Camera Permissions / UX Behavior

๐Ÿงพ Summary: When the user taps the โ€œReceiveโ€ button inside the DID Wallet app, the camera automatically activates, even though the user is only trying to display their receiving address or QR code โ€” not scan one. This can cause privacy concerns and unexpected behavior.

๐Ÿงช Steps to Reproduce:

  1. Open the DID Wallet app.
  2. Tap on โ€œReceiveโ€ (to get your wallet address or QR code).
  3. Observe that the camera automatically turns on without user confirmation.

๐Ÿ’ฅ Actual Result:

  • Camera is activated automatically when โ€œReceiveโ€ is clicked.
  • The app requests or uses camera access unexpectedly.

โœ… Expected Result:

  • The โ€œReceiveโ€ function should only display the wallet QR code and not activate the camera automatically.
  • The camera should only turn on when explicitly selecting โ€œScan QRโ€ or similar options.

โš™๏ธ Possible Cause:

  • Mislinked function โ€” โ€œReceiveโ€ button triggers the QR Scanner activity instead of QR Display.
  • Incorrect component routing between โ€œSendโ€ and โ€œReceiveโ€ modules.

๐Ÿงฑ Severity: ๐ŸŸ  Major (Privacy/UX Issue) ๐ŸŽฏ Priority: High ๐Ÿ“‚ Category: Functional / Privacy / User Experience

๐Ÿ’ก Suggested Fix:

  1. Separate โ€œReceiveโ€ and โ€œScanโ€ functionalities.
  2. Ensure camera permissions are only requested when scanning, not receiving.
  3. Add user confirmation prompt before activating the camera.
  4. Test across Android and iOS for consistent behavior.
ๅ›žๅค