google / android-key-attestation

Android Key Attestation validation library
Apache License 2.0
176 stars 63 forks source link

Consider publishing this package to Maven #12

Open eranmes opened 2 years ago

eranmes commented 2 years ago

From a comment on a pull request: I don't seem to have the ability to create issues in this repository so am commenting here:

Do you mind also publishing this server library into maven central? The current non-Google3 users I can find of it are all just directly copying some version of it, which will eventually drift/be stale.

tnek commented 2 years ago

Another (maybe easier?) option that would work for us is bazelizing the com.google.android.attestation package for the git_repository bazel rule.

If either of these aren't a priority for you, I'm happy to submit a PR doing so.

JesusMcCloud commented 1 year ago

FYI: since we depend on it, we've already wrapped this code and published it on maven central. Our main motivation was to make it easily configurable and play well in any sort of back-end (be it spring, ktor, whatever).

We've also taken it upon ourselves to provide an even higher-level abstraction that also integrated iOS attestation.