Skip to content

Commit

Permalink
add client attestation mgt
Browse files Browse the repository at this point in the history
  • Loading branch information
Thumimku committed Nov 1, 2023
1 parent 9f5a299 commit 4c7e9ce
Show file tree
Hide file tree
Showing 2 changed files with 1 addition and 9 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -40,19 +40,15 @@
* The `ClientAttestationServiceImpl` class implements the `ClientAttestationService` interface and is responsible for
* validating client attestation. It ensures the authenticity and context of the client when
* API-based authentication is requested.
*
* The class provides the following functionalities:
*
* - Validation of attestation data, which can be specific to an Android client.
* - Checks whether API-based authentication is enabled for the client application.
* - Determines whether the client application is subscribed to client attestation validation.
* - Validates attestation objects provided by the client application.
* - Retrieves the service provider's configuration for OAuth2 client authentication.
*
* - Retrieves the service provider's configuration for client attestation.
* Usage:
* To validate client attestation, use the `validateAttestation` method, which takes the attestation
* object, client ID, and tenant domain as parameters.
*
* Example usage:
* ```
* ClientAttestationService clientAttestationService = new ClientAttestationServiceImpl();
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -54,17 +54,13 @@
* The `AndroidAttestationValidator` class is responsible for validating client attestation for Android clients.
* It ensures the authenticity and integrity of the client's attestation data, which is typically provided in the
* form of an integrity token.
*
* The class provides the following functionalities:
*
* - Decoding and verifying the authenticity of the provided integrity token using the Google Play Integrity API.
* - Validating the overall integrity of the client's request, including request details and application integrity.
* - Checking if the application is recognized as "PLAY_RECOGNIZED" by the Google Play Integrity API.
*
* Usage:
* To validate client attestation for Android clients, use the `validateAttestation` method, which takes the
* attestation header and a context to store validation results and updated information.
*
* Example usage:
* ```
* AndroidAttestationValidator attestationValidator = new AndroidAttestationValidator(clientId, tenantDomain, metaData);
Expand Down

0 comments on commit 4c7e9ce

Please sign in to comment.