此页面介绍如何处理完整性验证结果问题。
请求完整性令牌时,您可以选择向用户显示 Google Play 对话框。当完整性验证结果存在一个或多个问题时,您可以显示此对话框。对话框显示在应用顶部,并提示用户解决问题的原因。关闭对话框后,您可以通过向完整性 API 发出另一个请求来验证问题是否已解决。
完整性对话框
GET_LICENSED(类型代码 1)
验证结果问题
当 appLicensingVerdict == "UNLICENSED"
时。这意味着用户帐户未获得许可。换句话说,他们没有从 Google Play 安装或购买该应用。
修复
您可以显示 GET_LICENSED
对话框,提示用户从 Google Play 获取您的应用。如果用户接受,则用户帐户将获得许可 (appLicensingVerdict == "LICENSED"
)。该应用将添加到用户的 Google Play 库中,Google Play 可以代表您提供应用更新。
示例 UX
CLOSE_UNKNOWN_ACCESS_RISK(类型代码 2)
验证结果问题
当 environmentDetails.appAccessRiskVerdict.appsDetected
包含 "UNKNOWN_CAPTURING"
或 "UNKNOWN_CONTROLLING"
时,这意味着设备上正在运行未知的应用,这些应用可能会捕获屏幕或控制设备。
修复
您可以显示 CLOSE_UNKNOWN_ACCESS_RISK
对话框,提示用户关闭所有可能正在捕获屏幕或控制设备的未知应用。如果用户点击 全部关闭
按钮,则所有此类应用都将关闭。
示例 UX
CLOSE_ALL_ACCESS_RISK(类型代码 3)
验证结果问题
当 environmentDetails.appAccessRiskVerdict.appsDetected
包含任何 "KNOWN_CAPTURING"
、"KNOWN_CONTROLLING"
、"UNKNOWN_CAPTURING"
或 "UNKNOWN_CONTROLLING"
时,这意味着设备上正在运行的应用可能会捕获屏幕或控制设备。
修复
您可以显示 CLOSE_ALL_ACCESS_RISK
对话框,提示用户关闭所有可能正在捕获屏幕或控制设备的应用。如果用户点击 全部关闭
按钮,则设备上所有此类应用都将关闭。
示例 UX
请求完整性对话框
当客户端请求完整性令牌时,您可以使用 StandardIntegrityToken(标准 API)和 IntegrityTokenResponse(经典 API)中提供的方法:showDialog(Activity activity, int integrityDialogTypeCode)
。
以下步骤概述了如何使用 Play 完整性 API 显示 GET_LICENSED 对话框
从您的应用请求完整性令牌,并将令牌发送到您的服务器。您可以使用标准或经典请求。
Kotlin
// Request an integrity token val tokenResponse: StandardIntegrityToken = requestIntegrityToken() // Send token to app server and get response on what to do next val yourServerResponse: YourServerResponse = sendToServer(tokenResponse.token())
Java
// Request an integrity token StandardIntegrityToken tokenResponse = requestIntegrityToken(); // Send token to app server and get response on what to do next YourServerResponse yourServerResponse = sendToServer(tokenResponse.token());
Unity
// Request an integrity token StandardIntegrityToken tokenResponse = RequestIntegrityToken(); // Send token to app server and get response on what to do next YourServerResponse yourServerResponse = sendToServer(tokenResponse.Token);
原生
/// Request an integrity token StandardIntegrityToken* response = requestIntegrityToken(); /// Send token to app server and get response on what to do next YourServerResponse yourServerResponse = sendToServer(StandardIntegrityToken_getToken(response));
在您的服务器上,解密完整性令牌并检查
appLicensingVerdict
字段。它可能如下所示// Licensing issue { ... accountDetails: { appLicensingVerdict: "UNLICENSED" } }
如果令牌包含
appLicensingVerdict: "UNLICENSED"
,则回复您的应用客户端,请求其显示许可对话框Kotlin
private fun getDialogTypeCode(integrityToken: String): Int{ // Get licensing verdict from decrypted and verified integritytoken val licensingVerdict: String = getLicensingVerdictFromDecryptedToken(integrityToken) return if (licensingVerdict == "UNLICENSED") { 1 // GET_LICENSED } else 0 }
Java
private int getDialogTypeCode(String integrityToken) { // Get licensing verdict from decrypted and verified integrityToken String licensingVerdict = getLicensingVerdictFromDecryptedToken(integrityToken); if (licensingVerdict.equals("UNLICENSED")) { return 1; // GET_LICENSED } return 0; }
Unity
private int GetDialogTypeCode(string IntegrityToken) { // Get licensing verdict from decrypted and verified integrityToken string licensingVerdict = GetLicensingVerdictFromDecryptedToken(IntegrityToken); if (licensingVerdict == "UNLICENSED") { return 1; // GET_LICENSED } return 0; }
原生
private int getDialogTypeCode(string integrity_token) { /// Get licensing verdict from decrypted and verified integrityToken string licensing_verdict = getLicensingVerdictFromDecryptedToken(integrity_token); if (licensing_verdict == "UNLICENSED") { return 1; // GET_LICENSED } return 0; }
在您的应用中,使用从服务器检索到的请求代码调用
showDialog
Kotlin
// Show dialog as indicated by the server val showDialogType: Int? = yourServerResponse.integrityDialogTypeCode() if (showDialogType != null) { // Call showDialog with type code, the dialog will be shown on top of the // provided activity and complete when the dialog is closed. val integrityDialogResponseCode: Task<Int> = tokenResponse.showDialog(activity, showDialogType) // Handle response code, call the Integrity API again to confirm that // verdicts have been resolved. }
Java
// Show dialog as indicated by the server @Nullable Integer showDialogType = yourServerResponse.integrityDialogTypeCode(); if (showDialogType != null) { // Call showDialog with type code, the dialog will be shown on top of the // provided activity and complete when the dialog is closed. Task<Integer> integrityDialogResponseCode = tokenResponse.showDialog(activity, showDialogType); // Handle response code, call the Integrity API again to confirm that // verdicts have been resolved. }
Unity
IEnumerator ShowDialogCoroutine() { int showDialogType = yourServerResponse.IntegrityDialogTypeCode(); // Call showDialog with type code, the dialog will be shown on top of the // provided activity and complete when the dialog is closed. var showDialogTask = tokenResponse.ShowDialog(showDialogType); // Wait for PlayAsyncOperation to complete. yield return showDialogTask; // Handle response code, call the Integrity API again to confirm that // verdicts have been resolved. }
原生
// Show dialog as indicated by the server int show_dialog_type = yourServerResponse.integrityDialogTypeCode(); if (show_dialog_type != 0) { /// Call showDialog with type code, the dialog will be shown on top of the /// provided activity and complete when the dialog is closed. StandardIntegrityErrorCode error_code = IntegrityTokenResponse_showDialog(response, activity, show_dialog_type); /// Proceed to polling iff error_code == STANDARD_INTEGRITY_NO_ERROR if (error_code != STANDARD_INTEGRITY_NO_ERROR) { /// Remember to call the *_destroy() functions. return; } /// Use polling to wait for the async operation to complete. /// Note, the polling shouldn't block the thread where the IntegrityManager /// is running. IntegrityDialogResponseCode* response_code; error_code = StandardIntegrityToken_getDialogResponseCode(response, response_code); if (error_code != STANDARD_INTEGRITY_NO_ERROR) { /// Remember to call the *_destroy() functions. return; } /// Handle response code, call the Integrity API again to confirm that /// verdicts have been resolved. }
对话框显示在提供的活动之上。用户关闭对话框后,任务将完成并返回 响应代码。
(可选) 请求另一个令牌以显示任何后续对话框。如果您进行标准请求,则需要再次预热令牌提供程序以获得最新的结果。