Android equivalent of ios devicecheck

后端 未结 2 1445
别跟我提以往
别跟我提以往 2020-12-06 18:16

Is there an android equivalent of ios device check https://developer.apple.com/documentation/devicecheck or any way to verify that this is your undoctored apk making the api

2条回答
  •  盖世英雄少女心
    2020-12-06 19:13

    They have SafetyNet - somewhat more comprehensive: https://developer.android.com/training/safetynet/index.html

    The two APIs you'll want to look at are Attestation and Verify Apps:

    The Attestation API checks a device's integrity while the Verify Apps API checks whether there are known potentially harmful apps installed. For added security protection, you should verify the device's integrity using the Attestation API before using the Verify Apps API.

    As for the second part of your question, whatever you bake into your APP you should consider already compromised because an attacker can decompile your APP. You are better off focussing on proper server side security and limit what your API actually exposes, proper encryption, tokenization (if dealing with payment info), and adequate logging to track nefarious calls to your API. There's a reason you hire specialized developers once you're big enough to attract the attention of hackers.

提交回复
热议问题