Stack Overflow
Stack Overflow

Questions tagged [safetynet]

102 questions
1
vote
2 answers

Verify JWS response from Android SafetyNet using PHP

Summary I am able to get a JWS SafetyNet attestation from Google's server and send it to my server. The server runs PHP. How do I "Use the certificate to verify the signature of the JWS message" using PHP on my server? What I have been doing I do…
Erik Melkersson
  • 899
  • 8
  • 19
1
vote
1 answer

"Android Device Verification" Service quota usage

I'm using Android Device Verification service (SafetyNet's attestation api), for verifying whether the request is sent from the same app which I built. We have a quota limit of 10,000 (which can be increased) on the number of request we can do using…
Avinash Dhinwa
  • 370
  • 2
  • 13
1
vote
1 answer

Google reCaptcha doesn't show captcha challenge dialog on a real device

I'm trying to implement google reCaptcha following this guide from google developers site. My code: private fun onClick() { SafetyNet.getClient(this).verifyWithRecaptcha(CAPTCHA_KEY) .addOnSuccessListener(this) { response -> …
Darthoo
  • 301
  • 1
  • 2
  • 14
1
vote
1 answer

How do I get Android SafetyNetClient.Attest to work with an API key that's restricted to android apps?

I call: mSafetyNetClient.attest(nonce, apiKey) and I send in my nonce and API Key. Basically it seems to only work when I have the API Key unrestricted. If I restrict it to only android apps, it stops working. Why is that and how do I get it to…
RichyDavisWindow3
  • 313
  • 3
  • 13
1
vote
0 answers

SafetyNet Safe Browsing not working

I'm trying to implement a simple URL request check-in Android using the Safe Browsing guide at https://developer.android.com/training/safetynet/safebrowsing.html to get a malware or phishing threats for some URL. I'm using a fragment (for a tabbed…
lcpr_phoenix
  • 373
  • 4
  • 15
1
vote
1 answer

Android does SafetyNet API quota apply to secondary methods?

according to the Google docs for the SafetyNet API here there is a quota attest() method. From the documentation for the SafetyNetApi here I see there are other methods, such as: isVerifyAppsEnabled(), listHarmfulApps(), lookupUri() Do you know if…
checkmate711
  • 3,301
  • 2
  • 35
  • 45
1
vote
2 answers

Google Safety Net Attestation API not giving response on emulators

We are trying to add the safety net API's to our app. When we test on real devices everything works fine, however when testing on emulators there is no response from the safety net servers. The purpose of the API is to detect emulated devices, so…
Sid
  • 1,224
  • 3
  • 23
  • 48
1
vote
0 answers

HTC One M8 with bootloader unlocked still passes SafetyNet Check with hasBasicIntegrity and ctsProfileMatch true.

I have created an app in which I NEED to be aware if there has been any tampering with the device's security. To achieve this I have implemented a SafetyNet Attestation API solution, I make decisions on how to proceed in the app based on the result…
Oyebisi
  • 562
  • 2
  • 9
  • 23
1
vote
1 answer

Criteria for passing SafetyNet Verify Apps API

I created an app that uses the SafetyNet Verify Apps API. The app is working without any error and in all the devices that I tested it, it said no harmful apps were found. I would like to know if what are the criteria for an app to pass the…
Tyson
  • 747
  • 2
  • 6
  • 18
1
vote
0 answers

Convert JWS to JSON using Volley throwing 400 response code error

I am trying to use the SafetyNet API by google. I have successfully sent a request to the google server and got the JWS output. In order to parse the JWS to JSON I am sending the JWS token to a URL given by google. But for some reason it is showing…
Tyson
  • 747
  • 2
  • 6
  • 18
1
vote
1 answer

is there any quota limit for sending safetynet compatibility check request

In the reference of safetynet docs it is mentioned that "The default request quota for a SafetyNet Attestation API key is 10,000 requests per day. If you require additional capacity, send a request to the SafetyNet API quota team". I am not using…
Baqir
  • 717
  • 1
  • 7
  • 20
1
vote
0 answers

Android SafetyNetClient.Attest(...) Returns ApiException

While attempting to attest with SafetyNetClient.attest(...) in the latest Play-Services v11.0.1, the client errors out and returns an ApiException. code snippet: byte[] nonce = getRequestNonce(); String apiKey = "
Wilson
  • 11
  • 2
1
vote
1 answer

How does SSL Hostname matching work on JWS?

When using Google SafetyNet for Android the documentation suggest that you Validate the SSL certificate chain and use SSL Hostname matching to ensure the leaf certification was issues to attest.android.com Now how does this work? I would have…
jim
  • 8,670
  • 15
  • 78
  • 149
1
vote
1 answer

Why is Google SafetyNet attestation taking 5+ seconds?

Just wondering if this is something anyone else has experienced. When I'm requesting a compatibility check, in my app it seems to take less than a second (~750ms). Unfortunately I also maintain a library that has been integrated by other…
Scott Merritt
  • 1,284
  • 2
  • 13
  • 24
1
vote
1 answer

SafetyNet: package name always return null

I am implementing SafetyNet API based on Google SafetyNet sample and SafetyNet Helper Here is my working code. First part is processing code I used at SafetyNetSampleFragment: import android.support.annotation.NonNull; import…
Trần Kim Dự
  • 5,872
  • 12
  • 55
  • 107
1 2 3 4
5
6 7