{"id":8731,"date":"2022-03-30T18:04:34","date_gmt":"2022-03-30T18:04:34","guid":{"rendered":"https:\/\/blogs.aaddevsup.xyz\/?p=8731"},"modified":"2022-08-08T20:39:34","modified_gmt":"2022-08-08T20:39:34","slug":"package-inspector-for-msal-android-native-guide","status":"publish","type":"post","link":"https:\/\/blogs.aaddevsup.xyz\/2022\/03\/package-inspector-for-msal-android-native-guide\/","title":{"rendered":"Package Inspector for MSAL Android Native Guide"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Package Inspector for MSAL Android Native Guide<\/h2>\n\n\n\n<p>The Microsoft Authentication Library (MSAL) for Android Native contains a tool called Package Inspector. This tool presents a list of packages installed on an Android device and allows the user to view, copy, and paste the signature hash used to sign the application&#8217;s package. It can be very useful in troubleshooting and verifying the signature hash for applications installed on an Android device. Below is a guide on the installation, use, and common issues of the Package Inspector.<\/p>\n\n\n\n<p>Some scenarios where the Package Inspector will be useful are:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>You have successfully developed your application to use MSAL, but after deploying the app to the Google Play Store, the app fails to perform authentication. In this case, the Package Inspector will be useful to discover the new signature hash used by Google to sign the app package.<\/li><li>You are implementing MSAL in your Android application, but encounter the following error:<br><mark style=\"background-color:#8ed1fc\" class=\"has-inline-color has-black-color\">&#8220;The redirect URI in the configuration file doesn&#8217;t match with the one generated with the package name and signature hash. Please verify the uri in the config file and your app registration in Azure portal.&#8221;<\/mark><br>In this case, you can use the Package Inspector to verify what the package signature hash is and correctly configure both the Azure Portal and application to use the correct signature hash.<\/li><li>You are implementing MSAL in your Android application, but encounter the following error:<br><mark style=\"background-color:#8ed1fc\" class=\"has-inline-color has-black-color\">&#8220;Intent filter for: BrowserTabActivity is missing&#8221;<\/mark><br>This error can occur because the signature hash specified in the AndroidManifest.xml file does not match the signature hash actually used to sign the apk file. In this case, the Package Inspector will be useful to verify what the signature hash actually is.<\/li><\/ul>\n\n\n\n<p>Note: The best place to learn about MSAL for Android Native is the github page at the following link. The readme is a very good start.<br><em><a href=\"https:\/\/github.com\/AzureAD\/microsoft-authentication-library-for-android\">https:\/\/github.com\/AzureAD\/microsoft-authentication-library-for-android<\/a><\/em><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Prerequisites<\/h2>\n\n\n\n<p>You should have:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>A recent version of Android Studio installed<\/li><li>A virtual Android device with application(s) installed <br>Android Studio comes with an AVD manager. You can find more info here:<br><a href=\"https:\/\/developer.android.com\/studio\/run\/managing-avds\">https:\/\/developer.android.com\/studio\/run\/managing-avds<\/a><\/li><li>Or a physical device with developer options and USB debugging enabled and a USB cable. More information can be found here:<br><a href=\"https:\/\/developer.android.com\/studio\/debug\/dev-options\">https:\/\/developer.android.com\/studio\/debug\/dev-options<\/a><\/li><li>An application installed to inspect<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Installation<\/h2>\n\n\n\n<p><strong>Option 1: Clone the repository directly into Android Studio<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Open Android Studio and close any open projects<\/li><li>Click on &#8220;Get From Version Control&#8221;<br><br><img loading=\"lazy\" decoding=\"async\" width=\"400\" height=\"451\" class=\"wp-image-8733\" style=\"width: 400px;\" src=\"\/wp-content\/uploads\/2022\/03\/image-1.png\" alt=\"\" srcset=\"\/wp-content\/uploads\/2022\/03\/image-1.png 474w, \/wp-content\/uploads\/2022\/03\/image-1-266x300.png 266w\" sizes=\"(max-width: 400px) 100vw, 400px\" \/><br><\/li><li>Make sure that &#8220;Git&#8221; is selected at the top of the window, paste in the repository url:<br><em>https:\/\/github.com\/AzureAD\/microsoft-authentication-library-for-android.git<\/em> <br>and click &#8220;Clone<br><br><img loading=\"lazy\" decoding=\"async\" width=\"700\" height=\"402\" class=\"wp-image-8734\" style=\"width: 700px;\" src=\"\/wp-content\/uploads\/2022\/03\/image-2.png\" alt=\"\" srcset=\"\/wp-content\/uploads\/2022\/03\/image-2.png 999w, \/wp-content\/uploads\/2022\/03\/image-2-300x172.png 300w, \/wp-content\/uploads\/2022\/03\/image-2-768x441.png 768w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><\/li><\/ol>\n\n\n\n<p><br><br><strong>Option 2: Download as a zip file and open in Android Studio<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Download the repository at:<br><em><a href=\"https:\/\/github.com\/AzureAD\/microsoft-authentication-library-for-android\/archive\/refs\/heads\/dev.zip\">https:\/\/github.com\/AzureAD\/microsoft-authentication-library-for-android\/archive\/refs\/heads\/dev.zip<\/a><\/em><\/li><li>Extract the zip file to the directory of your choice.<\/li><li>Open Android Studio and close any projects that are open.<\/li><li>Click on &#8220;Open an Existing Project&#8221;<br><br><img loading=\"lazy\" decoding=\"async\" width=\"400\" height=\"450\" class=\"wp-image-8735\" style=\"width: 400px;\" src=\"\/wp-content\/uploads\/2022\/03\/image-3.png\" alt=\"\" srcset=\"\/wp-content\/uploads\/2022\/03\/image-3.png 474w, \/wp-content\/uploads\/2022\/03\/image-3-267x300.png 267w\" sizes=\"(max-width: 400px) 100vw, 400px\" \/><br><\/li><li>Find and select the Root Package for the entire Android MSAL Repository; do not choose the &#8216;package-inspector&#8217; directory (This small detail is important) and click &#8220;OK&#8221;. (I renamed the directory to &#8216;msal-android&#8217;, but it will be &#8220;microsoft-authentication-library-for-android-dev&#8221; by default)<br><br><img loading=\"lazy\" decoding=\"async\" width=\"400\" height=\"455\" class=\"wp-image-8736\" style=\"width: 400px;\" src=\"\/wp-content\/uploads\/2022\/03\/image-4.png\" alt=\"\" srcset=\"\/wp-content\/uploads\/2022\/03\/image-4.png 531w, \/wp-content\/uploads\/2022\/03\/image-4-264x300.png 264w\" sizes=\"(max-width: 400px) 100vw, 400px\" \/><br><\/li><\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Using the Package Inspector<\/h2>\n\n\n\n<ol class=\"wp-block-list\"><li>With the Android MSAL project open in Android Studio, connect the desired Android device. This can be a physical device connected to the computer&#8217;s USB port, or an emulator booted from Android Studio&#8217;s AVD manager. Make sure that your device appears in the drop-down list at the top of Android Studio and select it.<\/li><li>To the left of the device drop-down, there is another drop-down list. Click this and select &#8220;package-inspector&#8221;<br><br><div class=\"img-zoom-container\"><img loading=\"lazy\" decoding=\"async\" width=\"800\" height=\"47\" class=\"wp-image-8739\" style=\"width: 800px;\" src=\"\/wp-content\/uploads\/2022\/03\/image-7.png\" alt=\"\" srcset=\"\/wp-content\/uploads\/2022\/03\/image-7.png 1434w, \/wp-content\/uploads\/2022\/03\/image-7-300x18.png 300w, \/wp-content\/uploads\/2022\/03\/image-7-1024x61.png 1024w, \/wp-content\/uploads\/2022\/03\/image-7-768x46.png 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/div><br><\/li><li>Click the green &#8220;play&#8221; button (indicated in the screenshot above with a green circle all the way to the right) to build, install, and run the package inspector on the desired device.<\/li><li>Look through the list of packages in the package-inspector app and click on a package for which you want to see the signature hash. All packages on the device that the package-inspector has permission to access will appear in this list.<br><br><img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"617\" class=\"wp-image-8741\" style=\"width: 300px;\" src=\"\/wp-content\/uploads\/2022\/03\/image-9.png\" alt=\"\" srcset=\"\/wp-content\/uploads\/2022\/03\/image-9.png 354w, \/wp-content\/uploads\/2022\/03\/image-9-146x300.png 146w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/li><\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Common Issues<\/h2>\n\n\n\n<p class=\"has-small-font-size\"><strong>Problems loading the tool into Android Studio:<\/strong><br>It is very important to make sure that you are loading the root package from the MSAL repository and not individually the package inspector. <\/p>\n\n\n\n<p class=\"has-small-font-size\">Make sure that the project you are loading into Android Studio is not package-inspector, but should be named this:<br>&#8220;microsoft-authentication-library-for-android-dev&#8221; or whatever you may have renamed the root repository on your system. See step 4 under Option 2 of the installation section of this blog post.<\/p>\n\n\n\n<p class=\"has-small-font-size\"><strong>Not all packages appear in the Package Inspector:<\/strong><br>This is a very likely issue to run into. You are able to install and open Package Inspector fine, and a list of packages appear in the app; however, you do not see packages for any of the apps you have installed on the device.<\/p>\n\n\n\n<p class=\"has-small-font-size\">An explanation for the reason behind this can be found in Google&#8217;s documentation on a change that was introduced in Android 11 (API 30):<br><a href=\"https:\/\/developer.android.com\/training\/package-visibility\">https:\/\/developer.android.com\/training\/package-visibility<\/a><\/p>\n\n\n\n<p class=\"has-small-font-size\"><em>How to fix it &#8211; <\/em><br>The way to fix the issue is to first open the AndroidManifest.xml file within the &#8216;package-inspector&#8217; directory found on the left side of Android Studio.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"305\" height=\"368\" src=\"\/wp-content\/uploads\/2022\/03\/image-5.png\" alt=\"\" class=\"wp-image-8737\" srcset=\"\/wp-content\/uploads\/2022\/03\/image-5.png 305w, \/wp-content\/uploads\/2022\/03\/image-5-249x300.png 249w\" sizes=\"(max-width: 305px) 100vw, 305px\" \/><\/figure>\n\n\n\n<p class=\"has-small-font-size\"><br>And then add the following permission and query between the &lt;manifest&gt;&lt;\/manifest&gt; tags:<\/p>\n\n\n\n<pre class=\"wp-block-syntaxhighlighter-code\">&lt;manifest xmlns:android=\"http:\/\/schemas.android.com\/apk\/res\/android\"\n    package=\"com.microsoft.inspector\">\n\n    ...\n\n    &lt;permission android:name=\"android.permission.QUERY_ALL_PACKAGES\" \/>\n\n    &lt;queries>\n        &lt;intent>\n            &lt;action android:name=\"android.intent.action.MAIN\" \/>\n        &lt;\/intent>\n    &lt;\/queries>\n\n&lt;\/manifest><\/pre>\n\n\n\n<p class=\"has-small-font-size\">Rerun the application from Android Studio, and the changes will be installed. Now you should be able to see the packages you have installed. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Package Inspector for MSAL Android Native Guide The Microsoft Authentication Library (MSAL) for Android Native contains a tool called Package Inspector. This tool presents a list of packages installed on an Android device and allows the user to view, copy, and paste the signature hash used to sign the application&#8217;s package. It can be very useful in troubleshooting and verifying the signature hash for applications installed on an Android device.&hellip;<\/p>\n","protected":false},"author":23,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,179,13],"tags":[266],"class_list":["post-8731","post","type-post","status-publish","format-standard","hentry","category-authentication","category-msal","category-tool","tag-android"],"_links":{"self":[{"href":"https:\/\/blogs.aaddevsup.xyz\/wp-json\/wp\/v2\/posts\/8731"}],"collection":[{"href":"https:\/\/blogs.aaddevsup.xyz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blogs.aaddevsup.xyz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blogs.aaddevsup.xyz\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/blogs.aaddevsup.xyz\/wp-json\/wp\/v2\/comments?post=8731"}],"version-history":[{"count":7,"href":"https:\/\/blogs.aaddevsup.xyz\/wp-json\/wp\/v2\/posts\/8731\/revisions"}],"predecessor-version":[{"id":9003,"href":"https:\/\/blogs.aaddevsup.xyz\/wp-json\/wp\/v2\/posts\/8731\/revisions\/9003"}],"wp:attachment":[{"href":"https:\/\/blogs.aaddevsup.xyz\/wp-json\/wp\/v2\/media?parent=8731"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blogs.aaddevsup.xyz\/wp-json\/wp\/v2\/categories?post=8731"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blogs.aaddevsup.xyz\/wp-json\/wp\/v2\/tags?post=8731"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}