Retrieve verified emails on Android via Credential Manager and OpenID4VP.
npx skills add https://github.com/shirulot/codex-skill --skill verified-email-shirulot
Please help me install this Agent Skill. Skill: verified-email Source: https://github.com/shirulot/codex-skill/tree/main/verified-email Command: npx skills add https://github.com/shirulot/codex-skill --skill verified-email-shirulot
This Skill solves the high-friction problem of traditional email verification by replacing manual OTP entry with cryptographically verified credentials, significantly improving user sign-up conversion rates.
Use the verified-email skill to implement the Credential Manager request flow for retrieving a verified email address in your Android application.
High-intent search queries and answers about installing and using this skill.
OTP-less email verification on Android uses the Credential Manager API and OpenID4VP standards to retrieve cryptographically signed digital credentials, replacing manual verification codes with trusted provider data.
OpenID4VP is a standard used to facilitate secure, passwordless authentication flows by requesting cryptographically signed digital credentials from trusted providers, allowing instant verification of user identity attributes.
Validating SD-JWT tokens requires server-side verification of the token's cryptographic signature and issuer authenticity, alongside strict nonce integrity checks to prevent replay attacks.
Yes, the Android Credential Manager supports retrieving verified email addresses and passkeys by integrating with the credentials and credentials-play-services-auth libraries to request user identity attributes.
Server-side validation for SD-JWT responses is required to verify issuer authenticity and enforce nonce integrity, which prevents replay attacks during the passwordless authentication flow.
The best way to prevent replay attacks during Android passwordless authentication is to implement server-side validation of SD-JWT responses with strict nonce integrity checks.
uyelikanilRetrieve cryptographically verified emails via Android Credential Manager and OpenID4VP.
yash-gargIntegrate Android Credential Manager verified email retrieval into authentication flows.
ritual-foundationImplement WebAuthn passkey authentication with SECP256R1 verification for Ritual dApps.
mymx2Implements cryptographically verified email retrieval in Android apps via Credential Manager API.
