search

googlesamples / android-play-safetynet

Samples for the Google SafetyNet Attestation API
Apache License 2.0
285 stars 133 forks source link

Is the api quota limit for testing online verification only OR for both request attestation and response verification? #34

Closed ychen96 closed 2 years ago

ychen96 commented 2 years ago

During initial testing and development (but not in production), you can call an online API for verifying the signature of the JWS statement. This process has also been shown in the android-play-safetynet sample API usage made available on GitHub. Note that online verification API is solely for early-stage testing, and you have a fixed quota of 10,000 requests per day.

Reference: here

I'm just wondering whether this 10000 per day quota limit applied to online verification step for testing purpose only? Or in other words, if I just use the APIs to send attestation request and implement the response verification myself, would I still suffer from the 10000 quota limit?

Anyone help? Thanks in advance.

ychen96 commented 2 years ago

Found the answer myself, sorry to bother.