App not behaving the same between platforms?

Unity Engine
1

Hello, over the last few days I made a login script that works off of a Firebase database. It essentially does what you would expect, signs new users up and logs them in when they put their credentials in. There is a decent amount of error handling, and testing every case in Unity (on PC) works just fine. All the errors and success messages come up like they should. Mobile though, is different.

For conciseness, I will attach the login method, since it is the strangest in terms of what it does, and itā€™s shorter than the signup method(s).

public void LoginButton() { //onclick listener
        Login();
    }

private async void Login() {
        string email = loginEmail.text.ToLower(); //fields from input text
        string password = loginPass.text.ToLower();
        if (await CheckIfEmailAndPasswordMatch(email, password)) { //wait for the method to finish
            loginError.text = "You were logged in! This would normally trigger the app loading.";
        } else {
            return; //can only return if the return type is 'void' or 'Task<T>'
        }
    }

private async Task<bool> CheckIfEmailAndPasswordMatch(string email, string password) {
        DataSnapshot snap = await userAccountDB.Child("Users").Child(email.Remove(email.IndexOf("@"))).Child("email").GetValueAsync();
        if ((String)snap.Value == email) {
            DataSnapshot snap2 = await userAccountDB.Child("Users").Child(email.Remove(email.IndexOf("@"))).Child("password").GetValueAsync();
            if ((String)snap2.Value == password) {
                return true;
            } else {
                ErrorReporter("incorrectEmailOrPass");
                return false;
            }
        } else {
            ErrorReporter("incorrectEmailOrPass");
            return false;
        }
    }

Again, everything works perfectly on desktop editor runtime. On mobile, putting in an incorrect username or password will tell you theyā€™re incorrect, but once correct ones are inputted it doesnā€™t give the login message. Does anyone know why this behavior is occurring? Can Android not handle async/await or Tasks? I am lost, so any help is greatly appreciated! Thank you!

2

Are youā€¦ are you comparing the userā€™s password to a plaintext password from the databaseā€¦ on your client?

Tell me Iā€™m crazy and thatā€™s not whatā€™s happening here right? If thatā€™s actually whatā€™s happening you are begging to get hacked. Like with a 5 mile tall sign that says ā€œHACK MEā€.

2 Likes
3

Well, the app is about 1% complete, so I donā€™t think encryption is exactly important considering the app has no real users, nor is it accessible to anyone but the people in my company. I just need help with my question, not a ā€˜use cryptography!ā€™ lesson.

4

Forget the plaintext part, Iā€™m even more worried about the part where you are sending the password to the client.

2 Likes
5

Iā€™ve been given instructions by my project leader to create a basic login script. I need to know why it functions differently on different platforms.

We will handle the insecurities. That wasnā€™t any part of my question at all.