From 7174dc12655dfd4e78a8fb1b67d27f215e86a189 Mon Sep 17 00:00:00 2001
From: Michael Feher <michael.feher@algorand.foundation>
Date: Tue, 27 Aug 2024 18:39:40 -0400
Subject: [PATCH] docs: add Android 14 service guide

---
 docs/astro.config.mjs                         |  24 +--
 .../android/provider-service/authenticate.md  |  13 --
 .../android/provider-service/introduction.mdx | 163 ++++--------------
 .../android/provider-service/register.md      |  18 --
 4 files changed, 33 insertions(+), 185 deletions(-)
 delete mode 100644 docs/src/content/docs/clients/android/provider-service/authenticate.md
 delete mode 100644 docs/src/content/docs/clients/android/provider-service/register.md

diff --git a/docs/astro.config.mjs b/docs/astro.config.mjs
index 389d998..38aeb3a 100644
--- a/docs/astro.config.mjs
+++ b/docs/astro.config.mjs
@@ -120,29 +120,7 @@ export default defineConfig({
           },
           {
             label: "Provider Service",
-            collapsed: true,
-            items: [
-              {
-                label: "Introduction",
-                link: "/clients/android/provider-service/introduction",
-              },
-              {
-                label: "Create Passkey",
-                link: "/clients/android/provider-service/create-passkey",
-                badge: {
-                  text: "TODO",
-                  variant: "danger"
-                },
-              },
-              {
-                label: "Get Passkey",
-                link: "/clients/android/provider-service/get-passkey",
-                badge: {
-                  text: "TODO",
-                  variant: "danger"
-                },
-              }
-            ],
+            link: "/clients/android/provider-service/introduction",
               badge: {
               text: "^14",
               variant: "danger"
diff --git a/docs/src/content/docs/clients/android/provider-service/authenticate.md b/docs/src/content/docs/clients/android/provider-service/authenticate.md
deleted file mode 100644
index a9f70d7..0000000
--- a/docs/src/content/docs/clients/android/provider-service/authenticate.md
+++ /dev/null
@@ -1,13 +0,0 @@
----
-title: "Android 14: Authenticate"
----
-
-```kotlin
-// MainActivity.kt
-val request = PendingIntentHandler.retrieveProviderCreateCredentialRequest(intent)
-if (request.callingRequest is CreatePublicKeyCredentialRequest) {
-    val result = viewModel.processCreatePasskey(this@CreatePasskeyActivity, request)
-} else {
-   val text = resources.getString(R.string.get_passkey_error)
-}
-```
diff --git a/docs/src/content/docs/clients/android/provider-service/introduction.mdx b/docs/src/content/docs/clients/android/provider-service/introduction.mdx
index a4751dc..5e77402 100644
--- a/docs/src/content/docs/clients/android/provider-service/introduction.mdx
+++ b/docs/src/content/docs/clients/android/provider-service/introduction.mdx
@@ -2,7 +2,7 @@
 title: "Android: Provider Service"
 ---
 
-import {Aside} from '@astrojs/starlight/components';
+import { Aside, CardGrid, LinkCard } from "@astrojs/starlight/components";
 
 <Aside type="danger">
   The API is relatively unstable and not all features are available.
@@ -20,137 +20,38 @@ just their Android devices.
 
 - **Mobile Wallets** that want to act as a roaming authenticator for non-crypto sites
 
+## Get Started
 
-## Provider Service
+Start by reviewing the [official guide](https://developer.android.com/identity/sign-in/credential-provider) from the documentation.
+During the discovery of the Credential Provider Service,
+[this blog post](https://developers.kddi.com/blog/2esxXGTcSBSaGLTJO0dC67) by [ko-koiwai](https://github.com/ko-koiwai) outlines some of the
+difficulties in implementing the service.
+There are still outstanding issues and experimental interfaces as of this writing.
 
+### Creating Passkeys
+
+In the [handling entry selection;](https://developer.android.com/identity/sign-in/credential-provider#handle-passkey-creation)
+you can use the [deterministic-P256](https://github.com/algorandfoundation/deterministic-P256-kt) library
+to derive Passkeys from a BIP39 mnemonic
+
+#### Main Key
+```kotlin
+val DP256 = DeterministicP256()
+
+// Generate the derived main key by passing along a BIP39 mnemonic:
+val derivedMainKey = DP256.genDerivedMainKeyWithBIP39("salon zoo engage submit smile frost later decide wing sight chaos renew lizard rely canal coral scene hobby scare step bus leaf tobacco slice")
+```
+
+#### Derived Keys
 ```kotlin
-@RequiresApi(Build.VERSION_CODES.UPSIDE_DOWN_CAKE)
-class LiquidCredentialProviderService: CredentialProviderService() {
-    private val credentialRepository = CredentialRepository()
-    private val job = SupervisorJob()
-    private val scope = CoroutineScope(Dispatchers.IO + job)
-
-    companion object {
-        const val TAG = "LiquidCredentialProviderService"
-        //TODO: App Lock Intents
-        const val GET_PASSKEY_INTENT = 1
-        const val CREATE_PASSKEY_INTENT = 2
-        const val GET_PASSKEY_ACTION = "foundation.algorand.demo.GET_PASSKEY"
-        const val CREATE_PASSKEY_ACTION = "foundation.algorand.demo.CREATE_PASSKEY"
-    }
-    /**
-     * Handle Create Credential Requests
-     */
-    override fun onBeginCreateCredentialRequest(
-        request: BeginCreateCredentialRequest,
-        cancellationSignal: CancellationSignal,
-        callback: OutcomeReceiver<BeginCreateCredentialResponse, CreateCredentialException>
-    ) {
-        val response: BeginCreateCredentialResponse? = processCreateCredentialRequest(request)
-        if (response != null) {
-            callback.onResult(response)
-        } else {
-            callback.onError(CreateCredentialUnknownException())
-        }
-    }
-
-    /**
-     * Process incoming Create Credential Requests
-     */
-    private fun processCreateCredentialRequest(request: BeginCreateCredentialRequest): BeginCreateCredentialResponse? {
-        when (request) {
-            is BeginCreatePublicKeyCredentialRequest -> {
-                return handleCreatePasskeyQuery(request)
-            }
-        }
-        return null
-    }
-
-    /**
-     * Create a new PassKey Entry
-     *
-     * This returns an Entry list for the user to interact with.
-     * A PendingIntent must be configured to receive the data from the WebAuthn client
-     */
-    private fun handleCreatePasskeyQuery(
-        request: BeginCreatePublicKeyCredentialRequest
-    ): BeginCreateCredentialResponse {
-        Log.d(TAG, request.requestJson)
-
-
-        val createEntries: MutableList<CreateEntry> = mutableListOf()
-        val name =  JSONObject(request.requestJson).getJSONObject("user").get("name").toString()
-
-        createEntries.add( CreateEntry(
-            name,
-            createNewPendingIntent(CREATE_PASSKEY_ACTION, CREATE_PASSKEY_INTENT, null)
-        )
-        )
-        return BeginCreateCredentialResponse(createEntries)
-    }
-    /**
-     * Handle Get Credential Requests
-     */
-    override fun onBeginGetCredentialRequest(
-        request: BeginGetCredentialRequest,
-        cancellationSignal: CancellationSignal,
-        callback: OutcomeReceiver<BeginGetCredentialResponse, GetCredentialException>,
-    ) {
-        try {
-            callback.onResult(processGetCredentialRequest(request))
-        } catch (e: GetCredentialException) {
-            callback.onError(GetCredentialUnknownException())
-        }
-    }
-
-    /**
-     * Fake a list of available PublicKeyCredential Entries
-     */
-    private fun processGetCredentialRequest(request: BeginGetCredentialRequest): BeginGetCredentialResponse{
-        Log.v(TAG, "processing GetCredentialRequest")
-        val deferredCredentials: Deferred<List<Credential>> = scope.async {
-            credentialRepository.getDatabase(this@LiquidCredentialProviderService).credentialDao().getAllRegular()
-        }
-        val credentials = runBlocking {
-            deferredCredentials.await()
-        }
-        return BeginGetCredentialResponse(credentials.map {
-            val data = Bundle()
-            data.putString("credentialId", it.credentialId)
-            data.putString("userHandle", it.userHandle)
-            PublicKeyCredentialEntry.Builder(
-                this@LiquidCredentialProviderService,
-                it.userHandle,
-                createNewPendingIntent(GET_PASSKEY_ACTION, GET_PASSKEY_INTENT, data),
-                // TODO: filter the request for PublicKeyCredentialOptions
-                request.beginGetCredentialOptions[0] as BeginGetPublicKeyCredentialOption
-            )
-                .setIcon(Icon.createWithResource(this@LiquidCredentialProviderService, R.mipmap.ic_launcher))
-                .build()
-        })
-    }
-    override fun onClearCredentialStateRequest(
-        request: ProviderClearCredentialStateRequest,
-        cancellationSignal: CancellationSignal,
-        callback: OutcomeReceiver<Void?, ClearCredentialException>
-    ) {
-        Log.d(TAG, "onClearCredentialStateRequest")
-        TODO("Not yet implemented")
-    }
-
-    private fun createNewPendingIntent(action: String, requestCode: Int, extra: Bundle?): PendingIntent{
-        val intent = Intent(action).setPackage("foundation.algorand.demo")
-        if (extra != null) {
-            intent.putExtra("CREDENTIAL_DATA", extra)
-        }
-        return PendingIntent.getActivity(
-            applicationContext, requestCode,
-            intent, (PendingIntent.FLAG_MUTABLE or PendingIntent.FLAG_UPDATE_CURRENT)
-        )
-    }
-    override fun onDestroy() {
-        super.onDestroy()
-        job.cancel()
-    }
-}
+val origin = "https://webauthn.guide"
+val userId = "a2bd8bf7-2145-4a5a-910f-8fdc9ef421d3"
+
+val keyPair = DP256.genDomainSpecificKeypair(derivedMainKey, origin, userId)
 ```
+
+## References
+<CardGrid>
+  <LinkCard title="Activites" description="Demo Activities for Android 14" href="https://github.com/algorandfoundation/liquid-auth-android/tree/develop/demo/src/main/java/foundation/algorand/demo/headless"/>
+  <LinkCard title="Credential Provider Service" description="Demo Service for Android 14" href="https://github.com/algorandfoundation/liquid-auth-android/blob/develop/demo/src/main/java/foundation/algorand/demo/services/LiquidCredentialProviderService.kt"/>
+</CardGrid>
diff --git a/docs/src/content/docs/clients/android/provider-service/register.md b/docs/src/content/docs/clients/android/provider-service/register.md
deleted file mode 100644
index ffe295b..0000000
--- a/docs/src/content/docs/clients/android/provider-service/register.md
+++ /dev/null
@@ -1,18 +0,0 @@
----
-title: "Android 14: Register"
----
-
-
-```kotlin
-val request = PendingIntentHandler.retrieveProviderGetCredentialRequest(intent)
-if (request != null) {
-    lifecycleScope.launch {
-        val result = viewModel.processGetPasskey(this@GetPasskeyActivity, request, intent.getBundleExtra("CREDENTIAL_DATA"))
-        Log.d(TAG, "result: $result")
-        setResult(Activity.RESULT_OK, result)
-        finish()
-    }
-} else {
-    val text = resources.getString(R.string.get_passkey_error)
-}
-```