Skip to content

feat(droidguard): support multi-step Play Integrity attestation via remote DroidGuard (fixes #2851) - #3778

Open
prakhardewangan2005-hash wants to merge 5 commits into
microg:masterfrom
prakhardewangan2005-hash:feature/play-integrity-remote-droidguard-2851
Open

feat(droidguard): support multi-step Play Integrity attestation via remote DroidGuard (fixes #2851)#3778
prakhardewangan2005-hash wants to merge 5 commits into
microg:masterfrom
prakhardewangan2005-hash:feature/play-integrity-remote-droidguard-2851

Conversation

@prakhardewangan2005-hash

Copy link
Copy Markdown

Summary

Implements multi-step session support in RemoteDroidGuardConnector and documents the server protocol to resolve Play Integrity attestation failures (#2851) impacting apps like Dott (com.ridedott.rider).

Changes

  • Added session tracking (X-DroidGuard-Session, X-DroidGuard-Step) in RemoteDroidGuardConnector
  • Added evaluateMultiStep() supporting intermediate challenge-response handshakes
  • Added docs/remote-droidguard-guide.md detailing the server architecture and JSON API specification

Related Issue

Fixes #2851

@D3SOX

D3SOX commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

Did you read the bounty note?

This is probably a general issue with Firebase SMS authentication. For the bounty to be released the Dott app should work to unlock and ride the scooters.

Can you show a video where it works?

From what I can tell this looks straight out of GPT without even checking it... You also mixed in some unrelated Google Cast changes, so I don't think any of this was actually tested and works...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[BOUNTY] Support Play Integrity over remote DroidGuard + Server/Guide [$85]

2 participants