Questions tagged [safetynet]
The safetynet tag has no usage guidance.
101
questions
0
votes
0
answers
762
views
Disable reCaptcha in firebase phone-auth (OTP) android
After entering phone number Recaptcha is showing for a few seconds.
Foloowed this qestion: How to disable reCaptcha in firebase phone-auth (OTP) android?
But the Android DeviceCheck API is deprocated.
...
3
votes
0
answers
766
views
Flutter Firebase Phone Auth .apk Missing valid app identifier, neither SafetyNet nor reCAPTCHA checks succeed
currently using Firebase Phone Number Auth, worked well in debug mode in pc, including iPhone and android emulator.
when I "flutter build apk" and put it into my smartphone, the apps prompt
&...
5
votes
0
answers
309
views
Flutter phone authentication with the Play Integrity API
Flutter phone authentication is not working since the safety net device verification is deprecated.
For the new projects created after January 2023, the safety net option is not available. We must use ...
1
vote
0
answers
95
views
Android FIDO2 SDK safetynet attestation format is deprecated
The safetynet attestation api is deprecated, but the FIDO2 SDK(play service) is still return android-safetynet attestation.
{"fmt":"android-safetynet","attStmt":{"...
16
votes
3
answers
3k
views
Validate phone authentication without showing the Recaptcha on Android in February 2023 (Firebase)
I developed an app with Flutter and Firebase that uses the phone authentication feature for Android and IOS. Everything works as expected except that the recaptcha is showing for Android.
To solve ...
0
votes
1
answer
214
views
how to fix safety net api warning in android studio
I am developing kotlin project, when i upload release bundle in google console, following warning arised. How to fix this warning?
1 MESSAGE FOR VERSION CODE 49
Warning
The developer of play-services-...
1
vote
1
answer
184
views
Safetynet to Play Integrity migration - Google Cloud account
When we migrate from the SafetyNet Api to Google Play Integrity Api we need link a PlayStore application to the Google Cloud Project in the Google Play console.
For existing on production application ...
2
votes
1
answer
383
views
how I can use integrity api instead of safetyNet Api in phone login Fragment
how I can use Integrity Api instead of safetyNet Api in phone login Fragment.. I try to upload my App to Google play and my phone login fragment depend on SafetyNet Api which is Deprecated
and when ...
1
vote
0
answers
302
views
SafetyNet Attestation API deprecation
I'm getting this email from Google developers who remembers me to migrate to Play Integrity API.
My app is built using react-native and it uses rnfirebase library for Authentication, storage, and a ...
0
votes
0
answers
411
views
Firebase App Check Quota Limits when using with firestore SDK in android
Our android app uses firestore as the DB and uses firestore SDK to make the reads and writes. We use firebase app check via safetynet(planning to migrate play integrity) as one of our security measure....
1
vote
0
answers
118
views
Play Integrity expect behavior for Futter App and how deactivate the API
Recently, Google has deprecated the reCAPTCHA system. I have read the documentation, but it does not mention how the system is validated from the users perspective. One of the most annoying things ...
5
votes
0
answers
286
views
Flutter firebase_auth crashed after removed SafetyNet
My flutter app is using firebase_auth (v 4.2.1) plugin to verify the phone number and which worked perfectly. But then I got "Migrate your Google SafetyNet Attestation API" warning from ...
2
votes
1
answer
835
views
App Check & Play Integrity with a custom backend
We're using SafetyNet Attestation API in our Android app and now planning to migrate to App Check / Play Integrity API since SafetyNet has been deprecated.
As far as I understand from the docs, the ...
3
votes
0
answers
766
views
Requests limits on Google Play Integrity service linked via project from Google Cloud
In our project we're using safetynet for attestation, but we need to migrate project into google play integrity API because safetynet is deprecated. We're not using google play to distribute our app, ...
1
vote
0
answers
541
views
App Check PlayIntegrity Not Working - Firebase Android
I have implemented App Check for my application , I have registered Sha256s,activated appcheck in console,initialized it buy it doesnt work with play Integrity !! I always get " Detected invalid ...
0
votes
0
answers
188
views
How to migrate to Play integrity API from Safetynet from beginning in java?
I am trying to migrate from safetynet to play integrity. I am stuck on starting point if anyone can help? should i change in my existing code or i have make fresh API ?
1
vote
0
answers
193
views
Firebase Phone Auth not working on flutter app (release aab file)
I have tested the application in debug mode and release mode (.apk file). It works perfectly, but when I release an app bundle (.aab) for the play store using the same Keystore, it doesn't work.
I ...
2
votes
0
answers
551
views
Migrating SafetyNet to Play Integrity API for Firebase
I'm developing a flutter application which uses Firebase as its framework. One of Firebase's features that we use is App Check. I've been using SafetyNet for my Android App Check, but recently I've ...
0
votes
2
answers
1k
views
Play Integrity API token produces IntegrityErrorCode.html#TOO_MANY_REQUESTS
I'm trying to migrate from SafetyNet to Play Integrity API following googles documentation
https://developer.android.com/google/play/integrity/verdict#request.
I'm building my request the same way ...
5
votes
1
answer
653
views
How to change SafetyNet version in a flutter app?
Google is not publishing any update release for my app because of this warning:
The developer of play-services-safetynet
(com.google.android.gms:play-services-safetynet) has reported critical
issues ...
5
votes
1
answer
1k
views
Flutter: SafetyNet Attestation fails basic integrity
When trying to run Firebase Phone Authentication through a Virtual Android Device am getting the following error messages;
E/zzbf ( 6464): SafetyNet Attestation fails basic integrity.
I/zzmt ( ...
8
votes
1
answer
7k
views
How to fix Remove the play-services-safetynet warning?
I am attempting to place my app in production but, continuously get the "warning"/error that wont allow me to deploy my app to production.
Critical issues have been reported with the ...
17
votes
3
answers
3k
views
Play store warning to migrate to Play Integrity API: Critical issues for com.google.android.gms:play-services-safetynet:18.0.1
We got a warning that we should migrate to Play Integrity API. We use only recaptcha from this dependency. In docs I didn't find anything in Play Integrity API which replaces recaptcha from safetynet. ...
1
vote
1
answer
204
views
Firebase Admins SDK and App check SafetyNet
I have firebase project connected to android app, and I am using App check (SafetyNet), and it work 100% well.
Also I am using admins SDK (java) to connect and do action in the project. before using ...
2
votes
1
answer
562
views
Firebase AppCheck: how to remove/disable SafetyNet entirely from the UI when previously enabled (Firebase Bug?)
We have both SafetyNet and Play Integrity enabled. We only want Play Integrity, but it’s currently impossible to disable SafetyNet from Firebase UI (looks like a Google bug!?).
SafetyNet reappears all ...
67
votes
2
answers
44k
views
Reported critical issues with version 17.0.0. google play warning [closed]
I got this warning when I was publishing my app
The developer of play-services-safetynet (com.google.android.gms:play-services-safetynet) has reported critical issues with version 17.0.0. Consider ...
5
votes
3
answers
7k
views
Critical issues have been reported with the following SDK versions: com.google.android.gms:play-services-safetynet:17.0.0
When I want to upload my flutter aab in Play Console, I got the below warning.
Critical issues have been reported with the following SDK versions:
com.google.android.gms:play-services-safetynet:17.0....
1
vote
0
answers
1k
views
Asking the user to update Play Store
Recently, we've integrated Play Integrity in our app to prevent emulators and bots. However, some users cannot generate integrity tokens with the following reasons:
Binding to the service in the Play ...
3
votes
2
answers
2k
views
How to make SafetyNet/Firebase AppCheck work in Google Play Pre-Launch Reports
I'm using Firebase AppCheck to authenticate that calls to my API are indeed coming from my app.
My issue is that ever since I enabled AppCheck, I can only get a token on legit devices or via debug ...
0
votes
1
answer
83
views
Android SafetyNet quota over 10.000
We have many applications in the store that authorize through SafetyNet. In total, there can be more than 100,000 users per day. To get a quota of more than 10 thousand, I need to fill out an ...
3
votes
0
answers
367
views
Understanding Firebase App Check rejection
My project use Firebase App check on iOS using DeviceCheck & App Test, cloud functions have enforcement checking wether auth context.app is undefined or not, simply like:
if (appCheckEnabled == ...
1
vote
0
answers
208
views
Is it possible to forge a SafetyNet Attestation token/x509 certificate
I was instructed to implement the API SafetyNet Attestation in an app and there were some concerns about verifying the token.
We created an endpoint that will return a nonce generated on the server ...
11
votes
1
answer
5k
views
unregister app in App check from SafetyNet in firebase
I have registered App in safetyNet in App check in firebase console but, now I have to unregistered
the app in safetyNet or disable safetyNet, How I do this?
2
votes
0
answers
584
views
Detect Rooted Device By Using SafetyNet - Failure Listener
I'm trying to detect rooted device on my app before my login process. Regarding to this answer , I decided to use SafetyNet. I edited this code like this:
public class ...
1
vote
1
answer
419
views
Not getting SafetyNet Api Attestation Response
I got an issue with google safetynet api attestation response. Even if i supplied the safetynet client, nonce and the apikey to the "client.AttestAsync()" method it won't return ...
1
vote
0
answers
197
views
How to add SafetyNet attestation to Flutter application
I was enabling AppCheck through SafetyNet in Google Play console for my Firebase-RT project (as recommended by the Google guys). I want now to configure a Flutter application to use it. How can I do ...
0
votes
5
answers
2k
views
Match Android apk SHA256 with SafetyNet apkCertificateDigestSha256
I am using SafetyNet to verify the integrity of the android app.
This is the flow as of now.
I generate a nonce value in the server and send it to the SafetyNet service to get the response.
I get the ...
2
votes
3
answers
1k
views
Firebase AppCheck Quotas & Limits
From firebase documentary https://firebase.google.com/docs/app-check
Your use of App Check is subject to the quotas and limits of the attestation providers you use.
DeviceCheck access is subject to ...
0
votes
1
answer
266
views
Can I use SafetyNet with firebase functions?
I am trying to implement SafetyNet in my app. I also, don't have a server, and I am using Firebase Firestore and Firebase Functions.
My knowledge about Firebase Functions is very limited. And I was ...
8
votes
3
answers
6k
views
Using Firebase App Check is not working (debug)
I am not able to settle this issue when implementing the new App Check feature from Firebase.
When uploading files to Firebase Storage it fails with an error
Caused by: java.io.IOException: { "...
0
votes
1
answer
438
views
Android SafetyNet Attestation Nonce Question
Google's instructions for implementing the attestation API are:
Obtain a nonce.
Request a SafetyNet attestation.
Transfer the response to your server.
Use the response on your server, along with your ...
0
votes
1
answer
251
views
Android SMS verification SafetyNet not working from Google Play
I have application in Google Play wit phone number verification.
But when I install it from Google Play then it write "This request is missing a valid app identifier, meaning that neither ...
2
votes
0
answers
124
views
SafetyNet: Does DDoS abuse count towards daily 10.000 request limit
According to Google SafetyNet documentation
The default quota allotment (per project) for calling the SafetyNet
Attestation API is 10,000 requests per day across your user base.
Does it also count ...
0
votes
1
answer
1k
views
Firebase phone authentication - app verification(SafetyNet)
I want to authenticate phone number Firebase with SafetyNet and not reCAPTCHA verification. I am following the Firebase documentation here: https://firebase.google.com/docs/auth/android/phone-auth
In ...
9
votes
3
answers
14k
views
What are the exact steps to enable safetynet device check api on Android
I have integrated firebase phone authentication in my android app. It was working fine for almost 2 months and suddenly from 2-3 days back I am observing different behavior.
Capcha screen started ...
2
votes
1
answer
629
views
Android SafetyNetClient.attest() Timeout
As you may know SafetyNetClient.attest() runs async.
But in our app we want to receive the SafetyNetApi.AttestationResponse synchronously. Because the SafetyNet result is required as input for ...
0
votes
1
answer
681
views
Android SafetyNet Attestation - Offline Device
I recently got a security issue for the app i'm working for: The possibility to run on rooted devices. I discovered that is hard to prevent this situation. My first try was to implement RootBeer. ...
1
vote
0
answers
74
views
Safetynet attestation request from a webview's javascript?
Today I was wondering if it would be possible to perform a Safetynet attestation request from the webview of an app.
I actually would assume 'yes' because a webview lives in the context of an app and ...
2
votes
2
answers
1k
views
Google SafetyNet API JwsResult is a hashed string instead of JSON
I've successfully implemented Google SafetyNet API, even have a successful response. Problem is that the JWSResult from AttestationResponse is a hashed string, whereas my expectation was to get a JSON ...
1
vote
1
answer
507
views
SafetyNet offline verification
I am trying to follow the example here to perform an offline verification (https://github.com/googlesamples/android-play-safetynet/blob/master/server/java/src/main/java/OfflineVerify.java). However, ...