play-integrity-checker-app

Play Integrity API Checker

Get info about your Device Integrity through the Play Integrity API

[!WARNING] If you don't install the app from Play Store and sideload it, you might not get the MEETS_BASIC_INTEGRITY and MEETS_STRONG_INTEGRITY results.

[!WARNING] If you want to implement the Play Integrity API in your app you shouldn't do it this way. The API server should not send the whole JSON to the app, only a yes/no. Also ideally you should pair the integrity request with another one (for example login). That way your API won't let the user proceed without a valid Integrity token that passes integrity checks (even if your app is reverse engineered).

Setup

In order to run this yourself you'll need:

1. The Play Integrity Checker Server
2. Your server url specified in local.properties like this:

API_URL=https://my-awesome-server-url.com

1. The app to be on Play Store (otherwise you won't have access to MEETS_BASIC_INTEGRITY and MEETS_STRONG_INTEGRITY)
2. Play Integrity linked to a Google Cloud project through the Play Console with MEETS_BASIC_INTEGRITY and MEETS_STRONG_INTEGRITY enabled

To set up your Google Cloud project see here

License

MIT License

…