keyguard-app icon indicating copy to clipboard operation
keyguard-app copied to clipboard

Add vivo FIDO client (com.fido.client) to privileged apps

Open zy6p opened this issue 1 month ago • 2 comments

This PR adds the preinstalled vivo FIDO / passkey client com.fido.client to the privileged apps list consumed by Keyguard (via .github/update_gpm_passkeys_priv_apps.py).

On recent vivo devices (OriginOS / Android 14), passkey flows routed through the system FIDO UI (com.fido.client) can fail in passkey providers with errors like:

The calling app 'com.fido.client' is not on the privileged list and cannot request authentication on behalf of the other app.

By trusting com.fido.client (package name + SHA-256 cert fingerprint), Keyguard can successfully complete passkey registration and authentication when the vivo system FIDO UI mediates the request. This change is aligned with a similar community contribution to Bitwarden: https://github.com/bitwarden/android/pull/6114

Verification:

  • Set Keyguard as the default passkey provider on a vivo device.
  • Use https://passkeys.io / https://webauthn.io with QR / cross-device sign-in.
  • Confirm that passkey registration and authentication via com.fido.client succeed after this change.

Screenshot_20251103_233149 Screenshot_20251103_233134

zy6p avatar Nov 03 '25 15:11 zy6p

All contributors have signed the CLA ✍️ ✅
Posted by the CLA Assistant Lite bot.

github-actions[bot] avatar Nov 03 '25 15:11 github-actions[bot]

I have read the CLA Document and I hereby sign the CLA

zy6p avatar Nov 03 '25 15:11 zy6p