flutter Play Store警告:play-services-safetynet(com.google.android.gms:play-services-safetynet)报告了版本17.0.0的严重问题

kgsdhlau  于 2023-04-22  发布在  Flutter
关注(0)|答案(3)|浏览(421)

当我试图在Play商店上更新我的Flutter时,我从Play商店得到了这个警告。

The developer of play-services-safetynet (com.google.android.gms:play-services-safetynet) has reported critical issues with version 17.0.0. Consider upgrading before publishing a new release.

Here's what the SDK developer told us:
The SafetyNet Attestation API is being discontinued and replaced by the new Play Integrity API. Begin migration as soon as possible to avoid user disruption. The Play Integrity API includes all the integrity signals that SafetyNet Attestation offers and more, like Google Play licensing and better error messaging. Learn more and start migrating at https://developer.android.com/training/safetynet/deprecation-timeline

我没有在我的build.gradle文件中使用safe-net implementation,可能是一些第三方pulgin正在使用此功能,但尝试了flutter upgrade,以确保更新所有软件包。但我仍然从Play商店收到此严重警告。如果任何人有解决方案,请让我知道。提前感谢。
下面是我pubspec.yaml实现:

cupertino_icons: ^1.0.2
  get: ^4.6.1
  path_provider: ^2.0.2+1
  get_storage: ^2.0.3
  file_picker: ^4.5.1
  cached_network_image: ^3.2.1
  shimmer: ^2.0.0
  introduction_screen: ^3.0.2
  json_serializable: ^6.1.4
  flutter_screenutil: ^5.0.0+2
  url_launcher: ^6.0.5
  google_fonts: ^2.3.1
  carousel_slider: ^4.0.0
  fluttertoast: ^8.0.8
  change_app_package_name: ^1.0.0
  font_awesome_flutter: ^10.1.0
  photo_view: ^0.13.0
  new_version: ^0.2.2
  shared_preferences: ^2.0.13
  bottom_bar: ^2.0.0
  intl: ^0.17.0
  http: ^0.13.4
  pull_to_refresh: ^2.0.0
  connectivity_plus: ^2.3.5
  image_picker: ^0.8.5+3
  syncfusion_flutter_pdfviewer: ^20.1.61-beta
  vdocipher_flutter: ^1.0.0-beta.6
  webview_flutter: ^3.0.4
  get_cli: ^1.8.1
  flutter_linkify: ^5.0.2
  flutter_countdown_timer: ^4.1.0
  webview_flutter_plus: ^0.3.0+2
  flutter_downloader: ^1.8.0+1  #integrate for ios also
  android_path_provider: ^0.3.0
  device_info_plus: ^4.0.0
  permission_handler: ^10.0.0
  open_file: ^3.2.1
  package_info_plus: ^1.4.2

参考图像:x1c 0d1x

332nm8kg

332nm8kg1#

com.google.gms:google-services本身已经包含了safetyNet API。正如你在最新4.3.13的gg服务版本中所看到的,它有safetyNet ver 18.0,它是OK的。
https://developers.google.com/android/guides/setup#list-dependencies https://developers.google.com/android/guides/releases

更新日期:2022/10/13

  • 如果问题与Firebase Auth相关,则这是问题,并且尚未修复:https://github.com/firebase/firebase-android-sdk/issues/3890
  • 谷歌的人说,他们有更多的优先事项https://github.com/firebase/firebase-android-sdk/issues/3890#issuecomment-1230092869
  • 更多信息:
  • 2023年6月是移民截止日期:应用程序将继续工作,但可能会出现问题和弃用警告。
  • 2024年6月:包含SafetyNet的应用程序将停止工作。
  • 在此之前,您应该忽略并订阅最新更新。https://github.com/firebase/firebase-android-sdk/issues/3890#issuecomment-1237167170

谢谢!

jc3wubiy

jc3wubiy2#

有同样的问题与Google Play的firebase认证库.不幸的是,它没有选择更新到已更新Safetynet模块的版本.所以必须找到一个工作的方法来排除模块从我的项目.
这就是我的经历:

dependencies {
    implementation platform('com.google.firebase:firebase-bom:30.3.2')
    implementation 'com.google.firebase:firebase-auth'
}

对于我的项目来说,最好的选择是从所有库中排除safetynet模块。不管什么原因,单个库排除不起作用。

dependencies {
    implementation platform('com.google.firebase:firebase-bom:30.3.2')
    implementation 'com.google.firebase:firebase-auth'
}
configurations.all {
    exclude group: 'com.google.android.gms', module: 'play-services-safetynet'
}

上述解决方案应该适用于任何有此问题的项目,无论实际包含安全网模块的库是什么。
对于任何感兴趣的人,这里有一些简单的命令来检查Android Studio终端中的项目依赖关系(为了更容易阅读,这将它们写入txt文件):

./gradlew app:dependencies > dependencies.txt
wrrgggsh

wrrgggsh3#

更新-2023年3月28日

发布Firebase Auth 21.2.0(BoM 31.4.0),在电话认证www.example.com中增加了对Play Integrity的支持https://firebase.google.com/support/release-notes/android#auth_v21-2-0
最新评论:https://github.com/firebase/firebase-android-sdk/issues/3890#issuecomment-1488368740

But I still see the warning in the Play console.
=> That's because the SafetyNet SDK is still being used as a fallback.We plan to completely remove the SafetyNet SDK in a future release - I will post a new comment to this thread when that happens.

我想知道在我的Firebase控制台〉应用程序检查中是否未启用播放完整性API。然后,忽略此警告,使用我的应用程序时是否会导致任何阻塞/问题(使用电话authen方法)?

相关问题