No search results...
F3: search down. SHIFT+F3: search up
(
Latest:
v3.6
)
v2.7
v3.6 (latest)
v3.5
v3.4
v3.3
v3.2
v3.1
v3.0
v2.9
v2.8
v2.6
Release Notes
Trial Guide
Before you start the trial
Sign Up for an Approov Trial
Initializing the Approov CLI
Integrate and Deploy
Monitor your API traffic with Approov Metrics
Test your platform
Advanced Features
Installation
Requirements
Initializing the Approov CLI
Installation on Linux
Installation on MacOS
Installation on Windows
Android Bundletool Installation
User Manual
Account Access Roles
Passwords
Account Access Recovery
Migrating to Account Access Roles
Key Components
Detection Capabilities
Security Rules Updates
Cloud Server Redundancy
Getting the Android SDK
Importing the SDK into Android Studio
Targetting Android 11 and Above
Android Obfuscation
Use on Emulator
Getting the iOS SDK as an XCFramework
Importing the SDK into Xcode
Use on Simulator
Getting the iOS SDK as a Framework
Logging
Bitcode Mode Management
Getting the Initial SDK Configuration
Getting the Extended Initial SDK Configuration
Handling Multiple Accounts
Initial SDK Configuration
Reading Dynamic SDK Configuration
Starting the SDK
Writing Dynamic SDK Configuration
Reinitializing the SDK
Overview
Adding API Domains
Keyset Key API Addition
Adding Pin Only API Domains
Listing API Domains
Removing API Domains
Setting Wildcard Mode
Adding Demonstration Shapes API
Token Fetch Errors
Synchronous Token Fetching
Asynchronous Token Fetching
Token Fetch Latency
Android App Signing Certificates
iOS IPA Extraction
Registering an App
Temporary Registrations
Updating Registration Expiry
Unversioned Registrations
Listing Registrations
Removing Registrations
Removing Multiple Registrations
Testing Android App Bundles
Annotating a Registration
Special Library Registration
Registration From Device
Registration Cloning
Token Format
JWS Token Signing
JWE Token Encryption
Token Lifespan
Token Claims
Attestation Response Code
Getting an Attestation Response Code
Obtaining Additional Token Information
Reporting Token Misuse
Checking Token Validity
Loggable Tokens
Long Lived Approov Tokens
IP Tracking Policy
Audience Inclusion
Issuer Inclusion
Requirements
Account Secret Key Export
Account Secret Key JWK Export
Generating Example Tokens
Changing the Account Secret Key
Raw Account Secret Key
Background
Static Pinning Issues
Approov Dynamic Pinning
Managing Pins
Pinning For New API Domains
Managing Domain Pins
Leaf Public Key Pin Extraction
Intermediate Public Key Pin Extraction
Certificate File Pin Extraction
Certificate Pins From a Device
Forcing Pin Application
Checking API Configuration
Getting All API Configuration
Setting All API Configuration
Setting Pins
Reacting to Configuration Changes
Reacting to Force Apply Pins
Testing the Pinning Implementation
Continuous Pinning Testing
What is a Security Policy
Getting Current Security Policy
Changing Security Policy
Rejection Policies
Custom Rejection Policies
Annotation Policies
Key IDs
Extracting the Device ID
Device ID Stability
Adding a Device Security Policy
Labelling a Device
Setting Pinning Mode
Listing Your Devices
Removing Devices
Removing Multiple Devices
Banning a Device
Removing a Device Ban
Getting State of a Device
Clearing All Device State
Filtering Purpose
Getting Specific Device Information
Analyzing New Devices
Adding a Device Filter
Analyzing Filtered Devices
Regular Expression Filtering
Conjunction Filters
User Properties
Listing Device Filters
Removing a Device Filter
Rejecting Filtered Devices
Banning Filtered Devices
Marking Filtered Devices as Risky
Custom Filtered Security Policy
Observing All Token Fetch Devices
Analyzing Captured Streams
Token Binding Concept
Setting the Binding
Generating Example Token with Binding
Backend Integration Impact
DeviceCheck Concept
Setting the DeviceCheck Key
Permanent Device Banning
Removing the DeviceCheck Key
Automatic Device Banning
How the SafetyNet Integration Works
Getting a SafetyNet API Key
Setting the SafetyNet API Key
Removing the SafetyNet API Key
App Build Requirements
Signing Certificate Integrity
Adjusting the SafetyNet API Quota
Web Protection Flow
Implementing the Integrated Service Flow
Enable Web Protection for an API
FingerprintJS
Google reCAPTCHA
hCaptcha
Web Protection Metrics Presentation
Web Protection Service Reference
Adding a New Key
Listing Keys
Removing Keys
Getting Public Key PEM
Getting Keyset JWKS
Importing Keys
Enabling Message Signing
Getting the Message Signing Key
Disabling Message Signing
Generating Message Signatures in the App
Checking Message Signatures in the Backend
Grafana
Metrics Naming
Summary Metrics
Flag Metrics
App Metrics
SDK Metrics
Policy Metric
Filter Metrics
Web Protection Metrics
Live Metrics
Billing Usage
Hourly Metrics
Daily Metrics
Monthly Metrics
SDK Metrics
Exporting Data
Summary Emails
API Monitoring
Managing Email Recipients
Setting Summary Frequency
Emergency Contact
Healthcheck Endpoint
Best Practice
User Roles
Admin Role
Delegate Role
Pentest Role
Automation Role
Adding New User Roles
Access Expiry Reminders
Listing User Roles
Revoking User Access
Resending Onboarding Emails
Creating an Automation Management Token
Automation Setup on Linux
Automation Setup on MacOS
Automation Setup on Windows
Retrieving an Existing Automation Management Token
Use Case
Operational Flow
Backend Integration
Remote Hardware Integration
Requesting a Baseline Measurement
Persisting the Measurement Configuration
Getting a Measurement Proof
CLI Tool Reference
API Command
App Signing Certificates Command
Device Command
DeviceCheck Command
Filter Command
Init Command
Keyset Command
Monitoring Command
Metrics Command
Password Command
Pin Command
Policy Command
Registration Command
Role Command
SafetyNet Command
SDK Command
Secret Command
Support Command
Token Commands
Users Command
Web Command
Whoami Command
Mobile SDK Reference
Initialization
Configuration Fetching
Getting the Device ID
Pin Extraction
Token Fetch Interface
Synchronous Token Fetch
Asynchronous Token Fetch
Token Binding
Integrity Measurement Proof
Device Measurement Proof
Message Signing
Set User Property
Set Activity
Quickstart Integrations
Frontend Mobile App
Backend API
Quickstart Integrations
Sitemap
© 2016-2026 Approov Ltd.
This is an old version
(v2.7)
. Please click
here for the latest documentation.
Home
>
Quickstart Integrations
>
Frontend Mobile App
>
Android Native
> Android Java Retrofit
Table of Contents
Android Java Retrofit