/safetycheck

Command line utility for verifying SafetyNet JWT tokens

Primary LanguageGoMIT LicenseMIT

safetycheck

Command line utility for verifying JSON Web Tokens from Google's SafetyNet API

Installation

Set GOPATH as necessary, then:

go get github.com/kianga/safetycheck

Usage

$ safetycheck < good-token.txt
{"apkCertificateDigestSha256":["K64XBz2c/rGGr8msokWAdJeevhYZztQ6S7buXfdSu4o="],"apkDigestSha256":"EC6DSwK8ODHyAc6uRpLf0QqBZkHpW7pOyJP+aVeMyv4=","apkPackageName":"com.example.package","basicIntegrity":true,"ctsProfileMatch":true,"extension":"CQHxcA1H0//M","nonce":"DMnSi/ya8fM0PLslPaHTZg==","timestampMs":1489726139356}
(exit code 0)

$ safetycheck < bad-token.txt
2017/03/17 11:32:53 Failed to validate token: Parse error: crypto/rsa: verification error
(exit code 1)

Dependencies