How to Fetch OAuth Access Token from App? - Android Q&A, Help & Troubleshooting

I'm using an app that communicates with the server via a REST API. Authentication and authorization is implemented with OAuth, of course. I need the access token that the app uses. The phone is rooted and I have access to the file system via adb.
I could grab the token with the help of a MITM attack. But that's complex to setup and I may have to retrieve the token again in the near future. I do not prefer this solution.
I'm looking for a simpler approach. The app has to store the token somewhere, be it in a file, or in a database.
My question is: Is there an app somewhere, that perhaps does already what I need (getting OAuth access tokens from other Android apps?) or what other suggestions do you have? Perhaps you can tell me what's best practice for an Android app when it comes to storing access tokens? And where to find the storage on the Android file system?

Related

[Q] PPP/EVDO authorization and Android

I am a n00b with Android and have the following question. Are EVDO authorization credentials such as MIP/PPP username and password are set within OS, i.e. built-in into PPP daemon? If so, then rooting is required to modify those settings (for example, to use the firmware with another Carrier).
Or are they stored separately, outside of- and external to Android OS? If, so rooting neither required, nor helpful for modifying EVDO authorization credentials

Installing certificates.

My friends who I play an online game use a mumble server for voice chat so I downloaded the mumble client for android beta. I try to install the certificate I backed up from my laptop but I am asked for a password when I know the certificate is not password protected.
If I try to install the certificate with no password the settings screen just dims until I hit the back key send the certificate will not install, anyone have any suggestions on how to get the certificate installed?
I am using settings > security > install certificate from device storage to install it.
Sent from my GT-I9300 using xda app-developers app
when I know the certificate is not password protected.
Click to expand...
Click to collapse
Are you asked a certificate password or asked to set a device password?
Have you checked if the certificate doesn't say encrypted in the raw text?
d4fseeker said:
Are you asked a certificate password or asked to set a device password?
Have you checked if the certificate doesn't say encrypted in the raw text?
Click to expand...
Click to collapse
The password it asks for is to extract the certificate files, and I know it is not encrypted because the pc mumble client doesn't encrypt exported certificates and I import the same certificate every time I reinstall windows and don't get asked for a password.
Sent from my GT-I9300 using xda app-developers app
Afaik the certificate is an RSA private key.
So the second line, when opened in the text editor of your choice, should not contain any Text with the literal string "encrypted".
Since Windows and Linux have different methods of Line endings, you might have to convert it to UNIX style.
E.g. the Windows Application Notepad++ is capable of doing it.
Blank passwords are the standard for non-decryption, so it should work...
Are you sure you need to install the certificate in Android and not in the app?
What ROM are you on?
d4fseeker said:
Afaik the certificate is an RSA private key.
So the second line, when opened in the text editor of your choice, should not contain any Text with the literal string "encrypted".
Since Windows and Linux have different methods of Line endings, you might have to convert it to UNIX style.
E.g. the Windows Application Notepad++ is capable of doing it.
Blank passwords are the standard for non-decryption, so it should work...
Are you sure you need to install the certificate in Android and not in the app?
What ROM are you on?
Click to expand...
Click to collapse
I don't see any encryption if I open it in notepad, and there is nowhere in the mumble for android beta app to install a certificate.
I am on stock LFB.
According to a quick Google, it seems that (at least for the ones I found, there are several - each based upon each other) Certificate Login is not yet supported. Maybe there are versions where it works, you'll have to search.
Any luck on getting this to work?
It seems like mumble uses certificate as a form of "password" for user logging in to mumble server with registered nick.
I've export a cert to my phone but was unable to install it as well, it says "no certificate to install" when i attempt to install the cert from mumble pc.
tishfire said:
Any luck on getting this to work?
It seems like mumble uses certificate as a form of "password" for user logging in to mumble server with registered nick.
I've export a cert to my phone but was unable to install it as well, it says "no certificate to install" when i attempt to install the cert from mumble pc.
Click to expand...
Click to collapse
Not yet, I'm running out of ideas, all I can think of is creating a new certificate rather than using one automatically generated by mumble, I haven't done this yet because I don't want to bother my mumble server guys with taking me off the server then putting me back on.

[Q] Device-agnostic application to access root privilege

Hello everyone!
I am creating an application which needs access to root privileges in order to be able to modify Call Manager given in the Android OS framework.
While I have been able to create an sample application with the help of a platform signature, but this solution is ROM-specific and we really need a way to develop an application which works on multiple platforms.
Any ideas/pointers would be deeply appreciated.
Thanks,
Vincent
Hi all,
I am still looking for an answer, but in the meanwhile I found that sharedUserId uses platform signature for accessing internal/hidden classes.
This is exactly what we have been doing and would like to know if we can have an alternate way to access and modify internal classes without using platform signature.
Thanks

Developing apps for GN2

I see that most development chat here is for system software, kernel, etc.
I would like to begin writing apps for the Android OS. I have a GN2.
I've installed Eclipse and have installed the last few SDK versions.
I eventually want to build an app that will allow a user to log into a web site and retrieve data from a database file on the web server using other phones also.
I'm an old Visual Basic programmer and have a little C# familiarity. Don't know much Java at all.
What else might I need to download and install into Eclipse to be able to write an app to access a database file on a server?
Anyone know of any app templates that can I can download and start off from to learn the process of writing such an app?
The database will be mySQL probably. Could be an Access or Sql Server file.
Thanks in advance,
Barry

Enable system certificate on Android

Dear all,
I'm searching for some help regarding system certificates on Android.
First of all, a little bit of context : I'm in charge of the migration of mobile devices from one Airwatch server to another. All devices are managed by MDM (Airwatch MDM Agent) that allows deployment of configuration profiles and apps. One of those profiles is called "CertAuth" and pushes some certificates that are needed to access internal ressources.
A few months ago, we have discoverd that one of the system certificates (Thawte Primary Root G3) was missing on some devices, mainly old versions of Android.
So we decided to push this certificate through the "CertAuth" profile.
Now the problem whith that method is that once the devices are unenrolled from the first server, profile "CertAuth", all corporate content and apps are removed (normal behavior). As Thawte Primary Root G3 certificate is part of the system certificates, it cannot be removed. So it is simply disabled.
This certificate is needed to access the target server, so once devices try to enroll, they receive some error message "cannot connect to host". Connection is simply refused due to the disabled Thawte G3.
Of course it can be manually enabled, but as you all may know, basic users are not always able to find the correct option in the device settings...
So (finally) my question is : is there any way to remotely enable this system certificate (little swich OFF/ON) in order to void manual action on more than 5000 devices?
By using a script or something that would be deployed on devices as third-party content/not removable content?

Categories

Resources