Stack Overflow
Stack Overflow

Questions tagged [safetynet]

102 questions
0
votes
1 answer

Is android safety net nonce equivalent to web authnn's challenge?

How similar is android SafetyNet to Web Authnn? Is the challenge passed to the WebAutnn's authenticator to generate an attestation object equivalent to the nonce that is passed to Android SafetyNet? Can I use a nonce with WebAuthnn as the challenge?
Lucas Vieira
  • 1
  • 2
0
votes
1 answer

Web Authentication: Can't Authenticate using fingerprint

I have implemented WebAuthn registration for android-safetynet. Where I can register using my fingerprint. However, I am not given an option to authenticate using a fingerprint. What can be the reason behind this? This is the Object provided to…
Rahul Rathod
  • 39
  • 9
0
votes
1 answer

Safety net Api Error when downloaded from play store

I have implemented a SafetyNet attest check when launching the app. It works fine when I run the release version from Android studio and detects (for eg.) the emulator from the device correctly. However when I download the same version from the Play…
sb_269
  • 553
  • 2
  • 7
  • 22
0
votes
1 answer

Android reCaptcha forces orientation in portrait

I'm developing an Android app that needs to validate user with reCaptcha and I'm occurred on strange behaviour: if screen orientation is in landscape, tapping button that fires reCaptcha API orientation changhes to portrait and then back to…
Lorenzo
  • 116
  • 1
  • 5
0
votes
0 answers

FIDO2 MAKE_CREDENTIAL response issue

I am developing FIDO2 Android authenticator. I just received MAKE_CREDENTIAL request from webauthn client. And then Created Credential Data which includes AAGUID, credential length, credentialId,Public key. Public key will contain curve name,…
Chella M
  • 392
  • 1
  • 2
  • 15
0
votes
1 answer

How to unit test SafetyNetClient.attest() and its associated OnSuccessListener and OnFailureListener

I am using SafetyNet in my application, following this guide: https://developer.android.com/training/safetynet/attestation, and I have code similar to this pattern (which is in provided link): SafetyNet.getClient(this).attest(nonce, API_KEY) …
koto
  • 720
  • 2
  • 9
  • 29
0
votes
2 answers

Verifying Android device using device verification api

I was looking at this for verifying the authenticity of an android device as show here. Now there're 2 ways to do this. One is offline verify and the other online verify. While online verify calls a google attestation check api, to which I also have…
megamind79
  • 69
  • 3
  • 11
0
votes
1 answer

JWS from Google SafetyNet contains different nonce value than one I submitted in attest()

I'm trying to implement SafetyNet in an Android app but am running into this issue: The JWS that I receive show the nonce as a particular value, but it is different than the one I passed in here: Task task =…
app-dev
  • 348
  • 1
  • 2
  • 12
0
votes
1 answer

How to make sure if an API is hit only by the designated app?

Say, I have an API /api/send-otp which takes phone-number as input and sends otp to user's phone-number. Now, this API can not be authenticated because auth token is generated after successful /api/confirm-otp call. How to make sure that the…
thekosmix
  • 1,705
  • 21
  • 35
0
votes
1 answer

Is there a limit for successive calls to SafetyNetClient.attest API?

I was able to make successful calls using the API but when I make multiple calls I usually get a Cancelled request in return. It's always after the 10th call, that's why I wondered if there is such a limit. I didn't find any information on the docs…
davisjp
  • 730
  • 1
  • 11
  • 24
0
votes
1 answer

SafetyNetClient api attestation failed-api exception

While attempting to attest with SafetyNetClient.attest(...) in the latest Play-Services v11.0.1, the client errors out and returns an ApiException. code snippet: byte[] nonce = getRequestNonce(); String apiKey = "
indraja machani
  • 679
  • 1
  • 9
  • 25
0
votes
1 answer

Reason why my device failed SafetNet attest API

I am working with the SafetyNet Attest API and I have tested my app on a number of devices. All the devices were un-rooted devices with their original bootloader. Till now they all passed the attest api test. Currently I am testing it on a Motorola…
Tyson
  • 747
  • 2
  • 6
  • 18
1 2 3 4 5 6
7