如何使用.NET的Google Client API获取解码的Play Integnity API代币

Question

我正在尝试使用 Google客户端API库的名称空间.net for .net for .net for decode filestity令牌，如播放完整性API文档。

但是，从图书馆文档中尚不清楚如何执行此操作。似乎应该从 deodeDrentegrityTokenResponse 对象返回解码的令牌有效负载，但是我找不到任何返回此类型的方法。

我希望这种类型将从 deodeStegtegrityToken（DecOdeTrentegrityTokenRequest，string）中返回，但此方法实际上返回了另一种 deodeDoDeNtegrityTokenEctegrityTokenRequest ，这根本无济于事。

是否有人成功使用此库来解码令牌？

参考：

• DecodeIntegrityTokenResponse

“

String integrityToken = "...token...";

String serviceAccountEmail = "...service account email...";

var certificate = new X509Certificate2("...key.p12...", "...secret...");

ServiceAccountCredential credential = new ServiceAccountCredential(
     new ServiceAccountCredential.Initializer(serviceAccountEmail)
     {
             Scopes = new[] { PlayIntegrityService.Scope.Playintegrity }
     }.FromCertificate(certificate));

// Create the service.
var service = new PlayIntegrityService(new BaseClientService.Initializer()
{
        HttpClientInitializer = credential,
        ApplicationName = "Play Integrity API Sample",
});

DecodeIntegrityTokenRequest request = new     DecodeIntegrityTokenRequest();
request.IntegrityToken = integrityToken;
DecodeIntegrityTokenResponse response = service.V1.DecodeIntegrityToken(request, "...package name...");

错误CS0029无法隐式转换类型'google.apis.playintegrity.v1.v1.v1.decodeintegritytokenrequest'到'google.apis.playintegrity.v1.data.decodeintegritytokenertegritytokenegritytokenertegritytokenertegritytokenertegritytokenertegritytokenegonsponse'

Answer 1

您应该依靠您的IDE来告诉您哪些类型这些对象是

您的代码说 deodeStegrityToken 应该返回 deodeDodeNtegrityTokenResponse 。您是这样声明的，而不是使用 var ，并允许编译器为您弄清楚。

DecodeIntegrityTokenResponse response = service.V1.DecodeIntegrityToken(request, "...package name...");

您的问题是，此方法实际上返回 DecoDeTrentegrityTokenRequest 。

要获取 decodeTrityTokenResponse 您需要执行请求

var request = service.V1.DecodeIntegrityToken(requestBody, "...package name...");
var result = request.Execute();

完整代码清理

using System.Security.Cryptography.X509Certificates;
using Google.Apis.Auth.OAuth2;
using Google.Apis.PlayIntegrity.v1;
using Google.Apis.PlayIntegrity.v1.Data;
using Google.Apis.Services;

Console.WriteLine("Hello, World!");


var integrityToken = "...token...";

var serviceAccountEmail = "...service account email...";
var pathToCert = "...key.p12...";
var certPassword = "...secret...";
var packageName = "...package name...";

var certificate = new X509Certificate2(pathToCert, certPassword);

var credential = new ServiceAccountCredential(
    new ServiceAccountCredential.Initializer(serviceAccountEmail)
    {
        Scopes = new[] { PlayIntegrityService.Scope.Playintegrity }
    }.FromCertificate(certificate));

// Create the service.
var service = new PlayIntegrityService(new BaseClientService.Initializer()
{
    HttpClientInitializer = credential,
    ApplicationName = "Play Integrity API Sample",
});

var requestBody = new DecodeIntegrityTokenRequest
{
    IntegrityToken = integrityToken
};
var request = service.V1.DecodeIntegrityToken(requestBody, packageName);

var result = request.Execute();

Answer 2

我已经编写了一个示例应用程序，以使用自己的键在C＃中验证和验证播放完整性。

官方文档没有C＃代码示例。

示例应用程序包含.NET框架和Dotnet Core的代码。

克隆应用程序后，搜索// todo并使用适当的值进行更新。

csharp.playintegrity.decoder

Answer 3

您可以通过以下方式在本地解码证明语句。
我正在使用 jose.jwt 在这里使代码更加简单。

var decryptionKey = Convert.FromBase64String("<DECRYPTION KEY>");
var verificationKey = Convert.FromBase64String("<VERIFICATION KEY>");
var signedAttestationStatement = "<ATTESTATION STATEMENT>";

var ecDsa = ECDsa.Create();
ecDsa.ImportSubjectPublicKeyInfo(new ReadOnlySpan<byte>(verificationKey), out _);

var decrypted = Jose.JWT.Decode(signedAttestationStatement, decryptionKey);
var payload = Jose.JWT.Decode(decrypted, ecDsa);