CredentialProviderService
@RequiresApi(value = 34)
public abstract class CredentialProviderService extends CredentialProviderService
A CredentialProviderService is a service used to save and retrieve credentials for a given user, upon the request of a client app that typically uses these credentials for sign-in flows.
The credential retrieval and creation/saving is mediated by the Android System that aggregates credentials from multiple credential provider services, and presents them to the user in the form of a selector UI for credential selections/account selections/ confirmations etc.
A CredentialProviderService is only bound to the Android System for the span of a androidx.credentials.CredentialManager get/create API call. The service is bound only if :
-
The service requires the
android.Manifest.permission.BIND_CREDENTIAL_PROVIDER_SERVICEpermission. -
The user has enabled this service as a credential provider from the settings.
Basic Usage
The basic Credential Manager flow is as such:
-
Client app calls one of the APIs exposed in
androidx.credentials.CredentialManager. -
Android system propagates the developer's request to providers that have been enabled by the user, and can support the
androidx.credentials.Credentialtype specified in the request. We call this the query phase of provider communication. Developer may specify a different set of request parameters to be sent to the provider during this phase. -
In this query phase, providers, in most cases, will respond with a list of
CredentialEntry, and an optional list ofActionentries (for the get flow), and a list ofCreateEntry(for the create flow). No actual credentials will be returned in this phase. -
Provider responses are aggregated and presented to the user in the form of a selector UI.
-
User selects an entry on the selector.
-
Android System invokes the
PendingIntentassociated with this entry, that belongs to the corresponding provider. We call this the final phase of provider communication. ThePendingIntentcontains the complete request originally created by the developer. -
Provider finishes the
Activityinvoked by thePendingIntentby setting the result as the activity is finished. -
Android System sends back the result to the client app.
The flow described above minimizes the amount of time a service is bound to the system. Calls to the service are considered stateless. If a service wishes to maintain state between the calls, it must do its own state management. Note: The service's process might be killed by the Android System when unbound, for cases such as low memory on the device.
Service Registration
In order for Credential Manager to propagate requests to a given provider service, the provider must:
-
Extend this class and implement the abstract methods.
-
Declare the
CredentialProviderService.SERVICE_INTERFACEintent as handled by the service. -
Require the
android.Manifest.permission.BIND_CREDENTIAL_PROVIDER_SERVICEpermission. -
Declare capabilities that the provider supports. Capabilities are essentially credential types that the provider can handle. Capabilities must be added to the metadata of the service against
CredentialProviderService.SERVICE_META_DATA.
Summary
Public constructors |
|---|
Public constructors
Public methods
onBeginCreateCredential
public final void onBeginCreateCredential(
@NonNull BeginCreateCredentialRequest request,
@NonNull CancellationSignal cancellationSignal,
@NonNull OutcomeReceiver<@NonNull BeginCreateCredentialResponse, @NonNull CreateCredentialException> callback
)
onBeginCreateCredentialRequest
public abstract void onBeginCreateCredentialRequest(
@NonNull BeginCreateCredentialRequest request,
@NonNull CancellationSignal cancellationSignal,
@NonNull OutcomeReceiver<@NonNull BeginCreateCredentialResponse, @NonNull CreateCredentialException> callback
)
Called by the Android System in response to a client app calling androidx.credentials.CredentialManager.createCredential, to create/save a credential with a credential provider installed on the device.
Credential provider services must extend this method in order to handle a BeginCreateCredentialRequest request. Once processed, the service must call one of the callback methods to notify the result of the request.
This API call is referred to as the query phase of the original create request from the client app. In this phase, provider must process the request parameters in the BeginCreateCredentialRequest and return a list of CreateEntry whereby every entry represents an account/group where the user will be storing the credential. Each CreateEntry must contain a PendingIntent that will lead the user to an activity in the credential provider's app that will complete the actual credential creation.
When user selects one of the CreateEntry, the associated PendingIntent will be invoked and the provider will receive the complete request as part of the extras in the resulting activity. Provider must retrieve the request through PendingIntentHandler.retrieveProviderCreateCredentialRequest. Once the activity is complete, and the credential is created, provider must set back the response through PendingIntentHandler.setCreateCredentialResponse.
| Parameters | |
|---|---|
@NonNull BeginCreateCredentialRequest request |
the |
@NonNull CancellationSignal cancellationSignal |
signal for observing cancellation requests. The system will use this to notify you that the result is no longer needed and you should stop handling it in order to save your resources |
@NonNull OutcomeReceiver<@NonNull BeginCreateCredentialResponse, @ |