SPIC (Simple Play Integrity Checker) is an open-source Android application designed to illustrate the functionality of both the Play Integrity API and the now-deprecated SafetyNet Attestation API. This tool is invaluable for developers and security enthusiasts looking to understand how these APIs work to verify the integrity of a device.
With SPIC, users can locally check the integrity verdict returned by these APIs directly on their device. Alternatively, for a more robust validation process, the verdict can be sent to a remote server. It's important to note that the server component must be self-hosted at present.
For those interested in delving deeper into the implementation, the source code for both the Android application and the server component is freely available on GitHub. You can find the repositories at /herzhenr/SPIC-android and /herzhenr/SPIC-server, respectively. These resources provide a comprehensive look at how to integrate and utilize the Play Integrity and SafetyNet Attestation APIs effectively.
Tags : Libraries & Demo
