SPIC (Simple Play Integrity Checker) is an open-source Android application designed to showcase the functionality of both the Play Integrity API and the now-deprecated SafetyNet Attestation API. This app provides a practical demonstration of how these APIs can be utilized to verify the integrity of a device.
With SPIC, users can check the integrity verdict received from the APIs directly on their device. Alternatively, the app allows the verdict to be sent to a remote server for validation. It's important to note that the remote server must be self-hosted at this time.
For those interested in the technical details, the source code for both the Android app and the server implementation is available on GitHub. You can access the Android app's code at /herzhenr/SPIC-android and the server's code at /herzhenr/SPIC-server. These repositories offer valuable resources for developers looking to understand and implement similar integrity checking mechanisms in their own projects.
