android / android/identity-samples
FIDO 2 - NOT_ALLOWED_ERR Cannot find credential in local KeyStore or Database
- Dominant language
- Kotlin
- Stars
- 515
- Forks
- 283
- Avg merge
- 9h 37m
- Merged PRs (30d)
- 2
Description
I'm getting the following error, I registered the credential using fido2, then I updated the application and I came across this error - showing the following message in the app: no access password available
2023-05-03 11:25:41.267 1218-1218 keystore keystore E Failed to decrypt blob; ciphertext or tag is likely
corrupted 2023-05-03 11:25:41.271 6033-6089 Fido com.google.android.gms.ui
E [AuthenticationOperation] Error checking whether the credential exists
java.util.concurrent.ExecutionException: ztv: 8:
Error looking up Android KeyStore key at cwrw.s(:com.google.android.gms@231516039@23.15.16 (150408-527344967):3)
at cwrw.get(:com.google.android.gms@231516039@23.15.16 (150408-527344967):9)
at aipx.run(:com.google.android.gms@231516039@23.15.16 (150408-527344967):43)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:462)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at abgp.c(:com.google.android.gms@231516039@23.15.16 (150408-527344967):6)
at abgp.run(:com.google.android.gms@231516039@23.15.16 (150408-527344967):7)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1167)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:641)
at ablw.run(:com.google.android.gms@231516039@23.15.16 (150408-527344967):0)
at java.lang.Thread.run(Thread.java:923) Caused by: ztv: 8: Error looking up Android KeyStore key
com.google.android.gms.ui W [FingerprintOrScreenlockUserVerifier] Error when accessing KeyStore.
aree: Unable to get the private key from Android Keystore
at ared.a(:com.google.android.gms@231516039@23.15.16 (150408-527344967):0)
at ahtb.c(:com.google.android.gms@231516039@23.15.16 (150408-527344967):3)
at ahtb.f(:com.google.android.gms@231516039@23.15.16 (150408-527344967):1)
at ahyb.a(:com.google.android.gms@231516039@23.15.16 (150408-527344967):4)
at cssf.t(:com.google.android.gms@231516039@23.15.16 (150408-527344967):2)
at ahyd.b(:com.google.android.gms@231516039@23.15.16 (150408-527344967):6)
at ahyd.c(:com.google.android.gms@231516039@23.15.16 (150408-527344967):0)
at aizc.a(:com.google.android.gms@231516039@23.15.16 (150408-527344967):3)
at cls.b(:com.google.android.gms@231516039@23.15.16 (150408-527344967):4)
at cls.f(:com.google.android.gms@231516039@23.15.16 (150408-527344967):2)
at cls.l(:com.google.android.gms@231516039@23.15.16 (150408-527344967):2)
at clp.run(:com.google.android.gms@231516039@23.15.16 (150408-527344967):0)
at android.os.Handler.handleCallback(Handler.java:938)
at android.os.Handler.dispatchMessage(Handler.java:99)
at android.os.Looper.loop(Looper.java:236)
at android.app.ActivityThread.main(ActivityThread.java:8061)
at java.lang.reflect.Method.invoke(Native Method)
at com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:656)
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:967)
Contributor guide
Research direction
The issue names no repository file or test; begin with the FIDO2 registration and sign-in flow and the Android KeyStore errors shown. Reproduce the behavior across the application update, then document a confirmed cause and the expected handling when the credential cannot be found.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, kotlin
- Domain
- authentication, mobile, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100