[Partner Bug] Implementing SDC in CredentialManager [309581942]

In Progress

Feature Request

Status Update

No update yet.

Description

oy...@gmail.com

created issue #1

Nov 7, 2023 10:38PM

Component used: Credentials

Version used: Android Studio Giraffe | 2022.3.1

Devices/Android versions reproduced on: Android13, API 33 Device

If this is a bug in the library, we would appreciate if you could attach:
implementation 'androidx.credentials:credentials-play-services-auth:1.2.0'
implementation 'androidx.credentials:credentials:1.2.0'

If this is a bug in the library, we would appreciate if you could attach:
I would like to implement SDC in Credential Manager. In the case of MDC, it operates as a pass key and generally calls the response value from the authentication device. However, in the case of SDC, the authentication device emits an error value.
I raised this issue before, but there was no proper answer.

For reference, the SDC registration process operates normally, and the authentication device only sends out error values during the authentication process.

Features when registering
requireResidentKey = false
attestation = direct

PublicKeyCredentialRequestOptions RequestJson Value :
The values below are example values.
{
"challenge": "HjBbH__fbLuzy95AGR31yEARA0EMtKlY0NrV5oy3NQw",
"timeout": 1800000,
"userVerification": "preferred",
"rpId": "

passkeys-codelab.glitch.me",
"allowCredentials":[
{
"type" : public-key",
"id" : "id"
}
],
}

Error when symptom occurs
During begin sign in, failure response from one tap: 16: Cannot find a matching credential.

please answer about my question.

Comments

bl...@google.com <bl...@google.com> #2Nov 7, 2023 10:53PM

Reassigned to re...@google.com.

Automated by Blunderbuss job android-credential-manager-autoassigner for config android_credman_config for component 1301097.

re...@google.com <re...@google.com> #3Nov 8, 2023 01:02AM

The error you posted state "activity is cancelled by the user". This implies the request was cancelled somehow during the request.

Can you grab a bugreport and attach it to this bug?

oy...@gmail.com <oy...@gmail.com> #4Nov 8, 2023 01:36AM

okay,

Registartion
CreatePublicKeyCredentialRequest createCredentialRequest = new CreatePublicKeyCredentialRequest(regJson);

regJson value :
{
"challenge": "<challenge>",
"rp": {
"id": "

passkeys-codelab.glitch.me",
"name": "CredMan App Test"
},
"pubKeyCredParams": [
{
"type": "public-key",
"alg": -7
},
{
"type": "public-key",
"alg": -257
}
],
"authenticatorSelection": {
"authenticatorAttachment": "platform",
"requireResidentKey": false,
"userVerification": "required"
},
"attestation": "direct",
"user": {
"id": "<userId>",
"name": "<userName>",
"displayName": "<userDisplayName>"
}
}

Authentication
GetPublicKeyCredentialOption getPublicKeyCredentialOption = new GetPublicKeyCredentialOption(authJson);

GetCredentialRequest getCredentialRequest = new GetCredentialRequest.Builder()
.addCredentialOption(new GetPasswordOption())
.addCredentialOption(getPublicKeyCredentialOption)
.build();

authJson Value :

{
"challenge": "<challenge>",
"timeout": 30000,
"rpId": "

passkeys-codelab.glitch.me",
"allowCredentials": [
{
"type": "public-key",
"id": "<credentialID>"
}
],
"userVerification": "required",
"extensions": {

}
}

** credentialID -> attestationObject inside credentialID

errorMessage :
During begin sign in, failure response from one tap: 16: Cannot find a matching credential.

errorStack :
[
androidx.credentials.playservices.controllers.CredentialProviderBaseController$Companion.getCredentialExceptionTypeToException$credentials_play_services_auth_release(CredentialProviderBaseController.kt: 110),
androidx.credentials.playservices.controllers.BeginSignIn.CredentialProviderBeginSignInController$resultReceiver$1$onReceiveResult$1.invoke(CredentialProviderBeginSignInController.kt: 93),
androidx.credentials.playservices.controllers.BeginSignIn.CredentialProviderBeginSignInController$resultReceiver$1$onReceiveResult$1.invoke(CredentialProviderBeginSignInController.kt: 93),
androidx.credentials.playservices.controllers.CredentialProviderController.maybeReportErrorFromResultReceiver(CredentialProviderController.kt: 159),
androidx.credentials.playservices.controllers.BeginSignIn.CredentialProviderBeginSignInController.access$maybeReportErrorFromResultReceiver(CredentialProviderBeginSignInController.kt: 55),
androidx.credentials.playservices.controllers.BeginSignIn.CredentialProviderBeginSignInController$resultReceiver$1.onReceiveResult(CredentialProviderBeginSignInController.kt: 91),
android.os.ResultReceiver$MyRunnable.run(ResultReceiver.java: 50),
android.os.Handler.handleCallback(Handler.java: 942),
android.os.Handler.dispatchMessage(Handler.java: 99),
android.os.Looper.loopOnce(Looper.java: 226),
android.os.Looper.loop(Looper.java: 313),
android.app.ActivityThread.main(ActivityThread.java: 8762),
java.lang.reflect.Method.invoke(NativeMethod),
com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java: 604),
com.android.internal.os.ZygoteInit.main(ZygoteInit.java: 1067)
]

re...@google.com <re...@google.com> Nov 13, 2023 07:26AM

Reassigned to ak...@google.com.

oy...@gmail.com <oy...@gmail.com> #5Nov 21, 2023 02:46AM

When will an answer be available?

oy...@gmail.com <oy...@gmail.com> #6Nov 21, 2023 02:47AM

Comment has been deleted.

Message last modified on Nov 21, 2023 02:48AM

oy...@gmail.com <oy...@gmail.com> #7Nov 21, 2023 02:49AM

In my opinion, when the require Resident Key value is false, if you register in Credential Manager and authenticate, authentication is done with GoogleOneTab, not Fido2 authentication.

sg...@google.com <sg...@google.com> Jul 31, 2024 04:37PM

Accepted by sg...@google.com.

lh...@google.com <lh...@google.com> #8Sep 24, 2024 09:27PM

Next step would be to clarity FiDo vs CM use cases and update partner Dev documentation.

da...@gmail.com <da...@gmail.com> #9Nov 29, 2024 11:22PM

Formulario sin título