Supporting Apple AppAttest / Google PlayIntegrity attestation statements

[agchou]

Hey all, do you have any plans to support these newer formats?

[santiagorodriguez96]

Hey @agchou!

Apple AppAttest support was added in v2.5.0.

I haven't heard about Google PlayIntegrity until now. Do you have any information related the statement? According to this post it expands the SafetyNet Attestation API so maybe its attestation statement is the same as the SafetyNet Attestation statement?

[agchou]

@santiagorodriguez96 I believe this is different. There are two apple formats... there's fmt: apple which is supported but there's also fmt: apple-appattest which is not. After reading a bit more though... it may be outside of WebAuth scope... cc @bdewater if you could chime in at all.