android / android/identity-samples

FIDO 2 - NOT_ALLOWED_ERR Cannot find credential in local KeyStore or Database

Open
#45 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Kotlin
Stars
515
Forks
283
Avg merge
9h 37m
Merged PRs (30d)
2

Description

I'm getting the following error, I registered the credential using fido2, then I updated the application and I came across this error - showing the following message in the app: no access password available

2023-05-03 11:25:41.267 1218-1218 keystore keystore E Failed to decrypt blob; ciphertext or tag is likely
corrupted 2023-05-03 11:25:41.271 6033-6089 Fido com.google.android.gms.ui
E [AuthenticationOperation] Error checking whether the credential exists
java.util.concurrent.ExecutionException: ztv: 8:
Error looking up Android KeyStore key at cwrw.s(:com.google.android.gms@231516039@23.15.16 (150408-527344967):3)
at cwrw.get(:com.google.android.gms@231516039@23.15.16 (150408-527344967):9)
at aipx.run(:com.google.android.gms@231516039@23.15.16 (150408-527344967):43)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:462)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at abgp.c(:com.google.android.gms@231516039@23.15.16 (150408-527344967):6)
at abgp.run(:com.google.android.gms@231516039@23.15.16 (150408-527344967):7)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1167)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:641)
at ablw.run(:com.google.android.gms@231516039@23.15.16 (150408-527344967):0)
at java.lang.Thread.run(Thread.java:923) Caused by: ztv: 8: Error looking up Android KeyStore key

com.google.android.gms.ui W [FingerprintOrScreenlockUserVerifier] Error when accessing KeyStore.
aree: Unable to get the private key from Android Keystore
at ared.a(:com.google.android.gms@231516039@23.15.16 (150408-527344967):0)
at ahtb.c(:com.google.android.gms@231516039@23.15.16 (150408-527344967):3)
at ahtb.f(:com.google.android.gms@231516039@23.15.16 (150408-527344967):1)
at ahyb.a(:com.google.android.gms@231516039@23.15.16 (150408-527344967):4)
at cssf.t(:com.google.android.gms@231516039@23.15.16 (150408-527344967):2)
at ahyd.b(:com.google.android.gms@231516039@23.15.16 (150408-527344967):6)
at ahyd.c(:com.google.android.gms@231516039@23.15.16 (150408-527344967):0)
at aizc.a(:com.google.android.gms@231516039@23.15.16 (150408-527344967):3)
at cls.b(:com.google.android.gms@231516039@23.15.16 (150408-527344967):4)
at cls.f(:com.google.android.gms@231516039@23.15.16 (150408-527344967):2)
at cls.l(:com.google.android.gms@231516039@23.15.16 (150408-527344967):2)
at clp.run(:com.google.android.gms@231516039@23.15.16 (150408-527344967):0)
at android.os.Handler.handleCallback(Handler.java:938)
at android.os.Handler.dispatchMessage(Handler.java:99)
at android.os.Looper.loop(Looper.java:236)
at android.app.ActivityThread.main(ActivityThread.java:8061)
at java.lang.reflect.Method.invoke(Native Method)
at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:656)
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:967)

Contributor guide

Open the contributing guide

Research direction

The issue names no repository file or test; begin with the FIDO2 registration and sign-in flow and the Android KeyStore errors shown. Reproduce the behavior across the application update, then document a confirmed cause and the expected handling when the credential cannot be found.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, kotlin
Domain
authentication, mobile, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.