Implementation of Play Integrity API

[KlausStoertebeker]

Is your feature request related to a problem? Please describe.
I have some important apps which rely on the play integrity checks, for example my "CamAPS FX" app to control my insuline pump and displaying values of my continious glucose measuring system. As I couldn't get the app run under the alternative operating system "iodéOS" (which uses microg-services) I contacted the developers of the app "CamAPS FX" and they told me that they use the google play integrity checks to ensure that the app was installed from the original Google Play Store without modification and that my smartphone (in my case a "Fairphone 5") isn't rooted or has an unlocked bootloader.

After intensive search in the internet I came to the conclusion that my enhancement/feature request "Implementation of "Integrity Check API"" is a general issue and that there are a lot of topics/issues demanding/requesting the implementation - but I fornd no solution.

Although I saw the issue #2050 "Binding to the service in the play store failed . This is due to having an old play store version installed on the device", I'm not sure which status this issue has (sorry, I'm not familiar with github and moving issues...).

Describe the solution you'd like
Implementation of "Integrity Check API"

Describe alternatives you've considered

Additional context

[KlausStoertebeker]

Additional information:
I used the app "Play Integrity API Checker" and it gives me the following result without executing further tests:

"Error getting token from Google

Binding to the service in the Play Store has failed.

This can be due to having an old Play Store version on the device."

[KlausStoertebeker]

Will this issue be solved by the pull request #2599 "Added Vending IntegrityService" and when will it be available to my "iodéOS"? (I know: silly question - but I really need it to migrate completly to my new smartphone...)

[fynngodau]

Play Integrity is a major topic that's generally really hard to work on; I've personally spent a week on it to little avail in the past. However, #2599 seems to be in a working state, which is quite impressive. While we cannot provide an ETA, I would personally assume it to land in an official microG release in the next few months.

We have no influence over when your custom OS will include this version in one of its releases.

[KlausStoertebeker]

Hi fynngodau,

thanks for information. Then I hope that it will be available in the (near) future and will close this issue.
Thanks for your work :-)

[marbens-arch]

Play Integrity is a major topic that's generally really hard to work on; I've personally spent a week on it to little avail in the past. However, #2599 seems to be in a working state, which is quite impressive. While we cannot provide an ETA, I would personally assume it to land in an official microG release in the next few months.

We have no influence over when your custom OS will include this version in one of its releases.

It's expected by December 8, 2024. It is likely that it will be postponed by a few days, though (like what happened with 0.3.4).

[ale5000-git]

This is already implemented in #2599 and it is available in the version 0.3.6 (or higher) of microG.

[rollingmoai]

Integrity check failed on the latest version, any help on this? (I'm running an -hw build on EMUI 14 if that helps)

[marbens-arch]

Integrity check failed on the latest version, any help on this? (I'm running an -hw build on EMUI 14 if that helps)

Note that while it is implemented, there is no guarantee it will pass. This does help with some applications like TextNow, which let's you through even if integrity fails, as long as it's there.

The integrity check didn't actually fail, but you don't have integrity passing.

[ale5000-git]

microG just add support for the new API, whether it pass or not still depends from the ROM (if it doesn't pass, many times it can be fixed by specific Magisk modules but unfortunately on Huawei since you cannot unlock bootloader you can't use Magisk).

[maxant69]

microG just add support for the new API, whether it pass or not still depends from the ROM (if it doesn't pass, many times it can be fixed by specific Magisk modules but unfortunately on Huawei since you cannot unlock bootloader you can't use Magisk).

So it depends on Huawei side? The only news is that with 0.3.6 now Play Integrity API Check app works (even if test fails).