What problem does it solve? Traditional email verification forces users through high-friction OTP or magic-link steps during sign-up, account recovery, and re-authentication. This Skill guides you through integrating Android's Credential Manager Digital Credentials API so users can share a cryptographically verified email address from their device in a single tap, removing the OTP step entirely. ## Core Features & Use Cases - OpenID4VP Request Construction: Build a DCQL query requesting a UserInfoCredential in SD-JWT format with claims like email, email_verified, name, and hd, secured with a per-request nonce. - Client Integration Workflow: Add androidx.credentials dependencies, initialize CredentialManager, present the system bottom sheet via getCredential(), and parse the returned vp_token SD-JWT for UI updates. - Server-Side Validation Guidance: Verify the issuer (https://verifiablecredentials-pa.googleapis.com), validate the SD-JWT signature against Google's public JWKs, and check the cnf key binding and nonce to prevent replay attacks. - Use Case: During sign-up, locate your SignUpScreen or AuthViewModel, trigger the verified email flow, create the account server-side without an OTP, then optionally prompt passkey creation for passwordless future sign-ins. ## Quick Start Ask the agent to implement verified email retrieval in your Android sign-up screen using the Credential Manager Digital Credentials API.
