Play store warning to migrate to Play Integrity API: Critical issues for com.google.android.gms:play-services-safetynet:18.0.1

Question

We got a warning that we should migrate to Play Integrity API. We use only recaptcha from this dependency. In docs I didn't find anything in Play Integrity API which replaces recaptcha from safetynet. Do you have any idea what should we do in this case?

Answer 1

You need to use 'com.google.android.gms:play-services-recaptcha' and remove safetynet unless you need any other api related to SafetyNet (in that case, you need Play Integrity API too)

This is about migrating to ReCaptcha Enterprise: https://cloud.google.com/recaptcha-enterprise/docs/migrate-recaptcha

And for you android code, some changes are needed for getting the token: https://cloud.google.com/recaptcha-enterprise/docs/instrument-android-apps

Essentially you need to call Recaptcha.getClient(activity).init(siteKey) and use the result in calling Recaptcha.getClient(activity).execute(handle, action).

Answer 2

here's the final response from Google Play Developer Support after six months of waiting:

As per technical team, your intuition is correct. The SafetyNet Attestation API is different from the SafetyNet reCAPTCHA API. In this case, you can safely ignore the SafetyNet Attestation API's deprecation announcements.