android / android/security-samples
fido2 404 Not Found
- Dominant language
- Kotlin
- Stars
- 1k
- Forks
- 450
- PR merge metrics
- No merged PRs in 30d
Description
When I run the fido demo, then click google to log in, select an account, and report this error after logging in successfully:
com.fido.example.fido2apiexample E/GAEService: Error getting all security key tokens
com.google.api.client.googleapis.json.GoogleJsonResponseException: 404 Not Found
404 Page not found
Error: Page not found
The requested URL was not found on this server.
at com.google.api.client.googleapis.services.json.AbstractGoogleJsonClientRequest.newExceptionOnError(AbstractGoogleJsonClientRequest.java:113)
at com.google.api.client.googleapis.services.json.AbstractGoogleJsonClientRequest.newExceptionOnError(AbstractGoogleJsonClientRequest.java:40)
at com.google.api.client.googleapis.services.AbstractGoogleClientRequest$1.interceptResponse(AbstractGoogleClientRequest.java:321)
at com.google.api.client.http.HttpRequest.execute(HttpRequest.java:1067)
at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.executeUnparsed(AbstractGoogleClientRequest.java:419)
at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.executeUnparsed(AbstractGoogleClientRequest.java:352)
at com.google.api.client.googleapis.services.AbstractGoogleClientRequest.execute(AbstractGoogleClientRequest.java:469)
at com.fido.example.fido2apiexample.GAEService.getAllSecurityTokens(GAEService.java:343)
at com.fido.example.fido2apiexample.Fido2DemoActivity$15.call(Fido2DemoActivity.java:565)
at com.fido.example.fido2apiexample.Fido2DemoActivity$15.call(Fido2DemoActivity.java:561)
at com.google.android.gms.tasks.zzv.run(Unknown Source:2)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1137)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:637)
at java.lang.Thread.run(Thread.java:1012)
Contributor guide
Research direction
Reproduce the flow in the fido demo, then inspect GAEService.getAllSecurityTokens at GAEService.java:343 and its caller in Fido2DemoActivity.java:561-565. Trace the request that returns 404 and verify the Google login and security-token path. Done means the account-selection flow no longer reports this 404 and security tokens load successfully.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, kotlin
- Domain
- authentication, mobile
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100