1nikolas / play-integrity-checker-app

Get info about your Device Integrity through the Play Intergrity API
MIT License
333 stars 47 forks source link

Error getting token form google #17

Closed pieotr closed 1 year ago

pieotr commented 1 year ago

I've just got an error message, error getting token form google The calling app is making too many requests to the API and hance is throttled. This shouldn't happen. If it does please open an issue on Github.

i hav used this app to chck my intgeity status, becuse play certification checking app say it passes but play store and gpay say my phone is not certified. I have Xaomi mi 9 and i was using EvolutionX rom and i had root instaled. It was all working fine but after a while form one day to another it stoped and while trying to pay said my device is not meeting security requirements. Done factory reset already, clean flush of ROM, other roms as well, and it's still not woroking even thou i havent installed root yet, just basic rom that sould have all certifications. Can someone help me?

1nikolas commented 1 year ago

Yes y'all hit the 10k/day request limit. I'll try to request an increase

Edit: just requested for 1M/day but due to the nature of the app I don't know if they are going to accept it

nutterthanos commented 1 year ago

I wonder how that happened?

1nikolas commented 1 year ago

I wonder how that happened?

It's simple. Too many people used the app today and Google allows certain uses (aka requests) of the api per day. You can request to increase it if you want (that's what I did) but it's up to them if they do it. The limit resets midnight (PT) which is in ~7 hours.

Jon8RFC commented 1 year ago

Would an alternate solution be multiple tokens, which the app cycles through?

It needs to be legitimate, but I'm happy to be one of the people to make a legitimate API token registration and "donate" it to the cause, assuming it's free. I'll register my email and phone number or whatever is necessary.

stoag commented 1 year ago

Possibly add a setting to use our own API key?

Having the same issue and my NFC just stopped working. Didn't find out till I was at checkout and didn't have my wallet. Need to troubleshoot asap. This app would be really helpful.

da411d commented 1 year ago

This is mass problem, because a lot of people checking their safetynet, because Google Pay stopped working on most of alternative ROMs🥲

1nikolas commented 1 year ago

I have no idea why Github doesn't send me emails about replies here. Google has responded about the api increase:

Our internal teams are currently reviewing your Play Integrity API quota increase request.

1nikolas commented 1 year ago

Would an alternate solution be multiple tokens, which the app cycles through?

It needs to be legitimate, but I'm happy to be one of the people to make a legitimate API token registration and "donate" it to the cause, assuming it's free. I'll register my email and phone number or whatever is necessary.

We can do it officially (if google wants to increase my api limits). Using multiple api keys to bypass quota limits I think is against TOS

1nikolas commented 1 year ago

Also now that I think about it, we cant do any of that. The google cloud project (which has the api key) must be linked to play console and you can only link one per app.

mskonovalov commented 1 year ago

Same here, apparently Google releases new version of integrity check, a lot of people got Gpay rejecting to work and started verifying the integrity 🤷

dongltron commented 1 year ago

Yup, that's what's happening.

Iwearthebelt commented 1 year ago

Any news or updates on this issue? Been looking around since yesterday but not having any luck. Are there any threads and discussions about this anywhere? Thanks

mskonovalov commented 1 year ago

Any news or updates on this issue? Been looking around since yesterday but not having any luck. Are there any threads and discussions about this anywhere? Thanks

What exactly you are looking for? There is an alternative app on Google Play, just search "integrity check" or something similar.

Or are you looking for a fix to overcome new change from the Google? If latter then try https://github.com/chiteroman/PlayIntegrityFix

1nikolas commented 1 year ago

Unfortunately can't do anything. Google doesn't like my app :(

We’re unable to fulfill your request for Consumer Project ID ... for the requested 10,000 to 1,000,000 (10K to 1M) queries per day as we have identified that your method of validating Play Integrity API responses is incorrect.

1nikolas commented 1 year ago

You can try this great app someone made it's way better than mine

https://play.google.com/store/apps/details?id=com.henrikherzig.playintegritychecker

1nikolas commented 1 year ago

Asked for clarification and this is what the told me:

Upon checking with our team, they were able to identify that your app offers the same functionality in one of our existing tools which you may use instead of requesting a quota increase.

Aka since my app does exactly what Play Store does (via developer options) they can't give me more quota.

1nikolas commented 1 year ago

I clarified the error: https://github.com/1nikolas/play-integrity-checker-app/blob/6d20423e4f141a5454b6808484c45a260e2a50f0/app/src/main/java/gr/nikolasspyr/integritycheck/MainActivity.java#L284-L285

Best I can do is add a counter to say how many tests are left but I don't think it's worth the time..

Unlearned6688 commented 1 year ago

Thank you for the app and the explanation

Giant corporations gonna giant corporation... Sucks...

thesweetiger commented 3 months ago

Asked for clarification and this is what the told me:

Upon checking with our team, they were able to identify that your app offers the same functionality in one of our existing tools which you may use instead of requesting a quota increase.

Aka since my app does exactly what Play Store does (via developer options) they can't give me more quota.

this is an illegal reason , europe ,usa,canda antitrust law

1nikolas commented 3 months ago

Asked for clarification and this is what the told me:

Upon checking with our team, they were able to identify that your app offers the same functionality in one of our existing tools which you may use instead of requesting a quota increase.

Aka since my app does exactly what Play Store does (via developer options) they can't give me more quota.

this is an illegal reason , europe ,usa,canda antitrust law

And what are you going to do? Fight Google on court?

SpeedyCraftah commented 2 months ago

I guess you could somewhat bypass this by having 2 of the same app on the play store, and if one can't do anymore attestations it will redirect you to the second app and vice versa which basically means you get 20k instead, although it's not really fair for you to spend money uploading the app, if Google will even approve it that is 😂.

Hard to say whether this is another "anti-root" thing since there are other ways to verify your attestation, but it's definitely annoying. They did grant YASNAC an exception to keep using SafetyNet with extended request limits though, but that's only for the legacy SafetyNet API which will be shut down eventually.

sukabai commented 1 month ago

Screenshot_2024-10-27-00-38-25-362_gr nikolasspyr integritycheck-edit

1nikolas commented 1 month ago

@sukabai does this happen every time?

sukabai commented 1 month ago

Yes, started 3 days ago. Tried in the morning, noon, evening, same error. This is from Spic and Google play store: Screenshot_2024-10-27-07-19-13-574_com android vending-edit Screenshot_2024-10-27-00-30-12-215_com henrikherzig playintegritychecker-edit

1nikolas commented 1 month ago

Yes, started 3 days ago. Tried in the morning, noon, evening, same error. This is from Spic and Google play store: Screenshot_2024-10-27-07-19-13-574_com android vending-edit Screenshot_2024-10-27-00-30-12-215_com henrikherzig playintegritychecker-edit

Looks like a problem with your device i guess.. No idea

sukabai commented 1 month ago

@sukabai does this happen every time?

Yes, even now. I think it's my phone not your app. Somehow I did something wrong and the result is that error. The problem started a few days ago, if I remember correctly, after I installed XPL-EX and played a little with it.

sukabai commented 1 month ago

Enabling store in Hide my applist was culprit!