Installing Play Integrity filtered apps from the Play Store

Oggyo

What is your solution? Here is my scenario(s).
Pixel 6a. I have a user profile with fully installed Play Services and Play Store signed-in with a dedicated throw-away account. I used it for apps that specifically required GP Services and/or checking the installation source.

My problem is about apps that don't show at all in the GP Store because of the Play Integrity filter, despite they do not enforce Play Integrity and just work fine once installed (by Aurora, see below). E.g. - some banking apps, Netflix, etc.

So far my workaround is to install them using the less secure Aurora where sometimes I need to use device spoofing. Not clear to me why switching to 7a lists the app, where was filtered when default (6a) was selected but at least this works.

Another possible issue is when the app is filtered in the GP Store and the same time demands to be installed from GPlay so I can't use Aurora or other sources. What workaround I can use in the standard (unmodified) GrapheneOS installation?

Thanks in advance.

other8026

m4ri0g ADB is not intended to be used on production devices. I'd definitely not advise allowing any app access to ADB. It's not the same as root, but doing so still gives an app way more access than any app should ever need.

I saw the articles about apps not working and popups telling users to install apps from Google Play. If this becomes a big problem, we may advise people to work around that some other way, but the project isn't likely to ever advise anyone to use anything like Shizuku.

Also, see that the apps are still working as OP said here:

Oggyo they do not enforce Play Integrity and just work fine once installed (by Aurora, see below). E.g. - some banking apps, Netflix, etc.

I'd say installing using Aurora is not ideal, but is definitely not the worst way to install these kinds of apps considering they don't show up on Google Play. Some may be in AppVerifier's database, so if you can, verify they're the legit versions that way.

m4ri0g

as for apps appears when you spoof pixel 7 is due to google play filters: https://developer.android.com/google/play/filters

the developer decides to which api level the app will work and if that api is higher than the api level for pixel 6. then the app does not show.

there is no secure alternative when the app is not available in your google play and installing from apk/aurora/obtanium will trigger an erroer asking you to use google play. you simply cannot use that app. because the developer doesn't want you to. nothing graphene can do.
you can probably try using shizuku and install from aurora in shizuku mode. this will spoof and make the app appear like the app was installed from the play store (you can see that in the app properties), but that is not guaranteed to work.
you do not need root or anything to use shizuku, you just need to enable wireless debugging and pair.

fid02

I can always obtain the signing certificate hashes for these apps by using Appverifier from the stock PixelOS with the apps obtained from Play Store.