Currently actionable notifications do not require unlocking the phone. I would like to use it for disarming my alarm, but would want to require the phone to be unlocked for security. Android’s API supports this through isAuthenticationRequired
So ideally a parameter could be added in the action config for requiring authentication.
If this is true and the device is locked when the action is invoked, the OS will show the keyguard and require successful authentication before invoking the intent. If this is false and the device is locked, the OS will decide whether authentication should be required.
I believe currently the default is false as we are not using this API call yet.