scottyab / safetynethelper

SafetyNet Helper wraps the Google Play Services SafetyNet.API and verifies Safety Net API response with the Android Device Verification API.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Support the new integrity check flag returned by Safetynet

scottyab opened this issue · comments

There's a new flag that is returned by the SafetyNe aTest API, this may explain some of the inconsistent results as noted in #19

Looks like there are 2 new flags: 'basicIntegrity' and 'extension' FWIW.

Looks like Google hasn't updated their documentation to talk about the new flags but the following whitepaper has a bit of info on them: http://ipfs.io/ipfs/QmcuVzCVYyYeGuDbUJmSeszGKXYwdBfhJXk6DkiSc5FuZr

Thanks @robsmall appreciated!

No problem! Adding the basicIntegrity check should be straight forward. I haven't done enough digging to find out how to use extension (yet).

If you find any documentation on this, please let me know :).

Google should be releasing documentation in the near future for the basicIntegrity check.

extension can be ignored :)

Looks like Google updated their docs and included the basicIntegrity check.

https://developer.android.com/training/safetynet/index.html

They also added code samples if you scroll all the way down to the bottom of the page. I haven't taken a look at them yet, but that should definitely be worth looking at.

Hey @robsmall thanks for the update I'll get on this update this or early next week.

Added as part of v0.3