android-play-safetynet icon indicating copy to clipboard operation
android-play-safetynet copied to clipboard

Samples for the Google SafetyNet Attestation API

Results 24 android-play-safetynet issues
Sort by recently updated
recently updated
newest added

It looks like there's a broken link in the documentation [page](https://github.com/googlesamples/android-play-safetynet/tree/master/server/java) Where it says "Google HTTP Client Library for Java (with Jackson 2 extension)" the reference should be to https://googleapis.github.io/google-http-java-client/....

> As mentioned before, the SafetyNet Attestation API is rate limited, and there is a default quota of 10,000 requests per day for each API key. Although this quota might...

Hi, So I'm currently implementing the OfflineVerify based on Sample provided. But I face an exception on `jws.verifySignature()` step. After some debugging (copying the verification implementation), the exception become more...

Failure: Network error while connecting to the Google Service https://www.googleapis.com/androidcheck/v1/attestations/verify?key=kkkk Task :runOfflineVerify FAILED xception in thread "main" java.lang.IllegalArgumentException at com.google.api.client.repackaged.com.google.common.base.Preconditions.checkArgument(Preconditions.java:108) at com.google.api.client.util.Preconditions.checkArgument(Preconditions.java:37) at com.google.api.client.json.webtoken.JsonWebSignature$Parser.parse(JsonWebSignature.java:599) at OfflineVerify.parseAndVerify(OfflineVerify.java:40) at OfflineVerify.process(OfflineVerify.java:97) at OfflineVerify.main(OfflineVerify.java:124)

`getApkDigestSha256()` now null checks the backing field, and if is null, returns an empty byte array

Hi Team, Our internal servers throw this below errors on " if (!securityKey.Certificate.Verify())" certificate validation. ``` [Chain error: PartialChain A certificate chain could not be built to a trusted root...

I'm testing the Safety Net APIs, and I found out that the base64 encoded nonce in the response also contains several bytes preceding the actual nonce. What are these? Here's...

According to the docs at https://developer.android.com/training/safetynet/attestation: > If the device is tampered—that is, if basicIntegrity is set to false in the response—the verdict might not contain data about the calling...

in the `SafetyNetApi.AttestationResponse.getJWSResult()` jws string, it is supposed to contain 2 periods according to the [JWS spec](https://tools.ietf.org/html/draft-ietf-jose-json-web-signature-36#page-9). However, when I run the sample app, I only see one single period....