Meta Quest構成証明API

#include <iostream>
#include <random>
#include <vector>
#include <algorithm>

#include "OVR_Platform.h"

// Base64 Url encoding
std::string base64UrlEncode(const std::vector<uint8_t>& data) {
    static const std::string chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
    std::string result;

    int val = 0, valb = -6;
    for (uint8_t c : data) {
        val = (val<<8) + c;
        valb += 8;
        while (valb >= 0) {
            result.push_back(chars[(val>>valb)&0x3F]);
            valb -= 6;
        }
    }
    if (valb > -6) result.push_back(chars[((val<<8)>>(valb+8))&0x3F]);
    while (result.size() % 4) result.push_back('=');

    return result;
}

// The "challenge_nonce" parameter must be a non-wrapping Base64URL-encoded
// string, formed from a random byte array by the application server.
std::string getChallengeNonceFromAppServer() {
    std::random_device rd;
    std::vector<uint8_t> randomNonce(16);
    std::generate(randomNonce.begin(), randomNonce.end(), [&]() { return rd(); });

    // Convert to Base64 string
    // The length of the challenge_nonce must range from 22 to 172 characters.
    std::string challenge_nonce = base64UrlEncode(randomNonce);

    return challenge_nonce;
}


void SampleCode() {
   std::string challenge_nonce = getChallengeNonceFromAppServer();
   // Calling the Attestation API
   ovr_DeviceApplicationIntegrity_GetIntegrityToken(challenge_nonce.c_str());

   // Get message response from message queue
   while(true) { // Can set a poll timer here
       // Pop messages off of the message queue
       ovrMessageHandle message = ovr_PopMessage();
       while (message != nullptr) {
           // First check for errors
           if (ovr_Message_IsError(message)) {
               ovrErrorHandle errorHandle = ovr_Message_GetError(message);
               const char* errorMessage = ovr_Error_GetMessage(errorHandle);
               // handle the error
           }

           // Get the message type
           ovrMessageType messageType = ovr_Message_GetType(message);
           // Handle the response
           if (messageType == ovrMessage_DeviceApplicationIntegrity_GetIntegrityToken) {
               const char*  attestation_token = ovr_Message_GetString(message);
               // Send the Attestation token to the app server for token verification
           } else {
               // In this example, we are disregarding all other message types, thus,
               // we will simply ignore them.
           }

          ovr_FreeMessage(message);
          return;
       }
   }
}

{
  "request_details": {
    "exp": 1684606153,
    "nonce": "JMxMPp1H6kCxGzPRsjKFLw==",
    "timestamp": 1684519753
  },
  "app_state": {
    "app_integrity_state": "NotEvaluated",
    "package_cert_sha256_digest": [
      "c8a2e9bccf597c2fb6dc66bee293fc13f2fc47ec77bc6b2b0d52c11f51192ab8"
    ],
    "package_id": "com.example.name123",
    "version": "1"
  }
  "device_state": {
    "device_integrity_state": "NotTrusted",
    "unique_id": "cd81cd7e7e0525f99442ab6392117e89759e8872852de0495aa58f22bd8a1253",
  }
}

{
  "request_details": {
    "exp": 1684606153,
    "nonce": "JMxMPp1H6kCxGzPRsjKFLw==",
    "timestamp": 1684519753
  },
  "app_state": {
    "app_integrity_state": "StoreRecognized",
    "package_cert_sha256_digest": [
      "c8a2e9bccf597c2fb6dc66bee293fc13f2fc47ec77bc6b2b0d52c11f51192ab8"
    ],
    "package_id": "com.example.name123",
    "version": "1"
  }
  "device_state": {
    "device_integrity_state": "Advanced",
    "unique_id": "442ab6392117e89759e8872852de0495aa58f22bd8a1253123123",
  }
}

{
  "request_details": {
    "exp": 1684606153,
    "nonce": "JMxMPp1H6kCxGzPRsjKFLw==",
    "timestamp": 1684519753
  },
  "app_state": {
    "app_integrity_state": "StoreRecognized",
    "package_cert_sha256_digest": [
      "c8a2e9bccf597c2fb6dc66bee293fc13f2fc47ec77bc6b2b0d52c11f51192ab8"
    ],
    "package_id": "com.example.name123",
    "version": "1"
  }
  "device_state": {
    "device_integrity_state": "Advanced",
    "unique_id": "442ab6392117e89759e8872852de0495aa58f22bd8a1253123123",
  }
  "device_ban": {
    "is_banned": true
    "remaining_ban_time": 34 days
  }
}

 https://graph.oculus.com/platform_integrity/device_ban?method=POST&unique_id=<unique_id>&is_banned=<is_banned>&remaining_time_in_minute=<remaining_time_in_minute>&access_token=<access_token>

{
   "message": "Success",
   "ban_id": "NjIxMzI3MTc0MTgzMzkzNw"
}

{
   "error": {
      "message": "There is no record of this Unique ID. Please check that the Unique ID matches what is given in the Attestation Token and try again. Note that Unique IDs will change every 30 days for each application and device, make sure the Unique ID is up to date.",
      "type": "OCApiException",
      "code": 1,
      "error_data": {


      },
      "error_subcode": 1614026,
      "fbtrace_id": "AUhV19OFsDqs6gTXn7zVybm"
   }
}

{
   "error": {
      "message": "The App ID of the Access Token does not match the Unique ID, please check the Unique ID/Access Token and try again",
      "type": "OCApiException",
      "code": 1,
      "error_data": {


      },
      "error_subcode": 1614027,
      "fbtrace_id": "AHBbS8rEDcgajcgpQcqtVO1"
   }
}

{
   "error": {
      "message": "The Remaining Time In Minute field is invalid. Please check that the time inputted is between 0 and 52560000.",
      "type": "OCApiException",
      "code": 1,
      "error_data": {


      },
      "error_subcode": 1614028,
      "fbtrace_id": "AtFBCvCIb4IXSGvvc4GudY8"
   }
}

https://graph.oculus.com/platform_integrity/device_ban_ids?access_token=<access_token>

{
   "data": [
      {
         "message": "Success",
         "all_ban_ids": [
    {
               "ban_id": "MTI0MjQ3MTc0MDk2NTYwNg",
               "creation_date": "2025-05-27"
            },
            {
               "ban_id": "NTgyOTAyMTc0MDk2NTgyNQ",
               "creation_date": "2025-05-09"
            },
            {
               "ban_id": "ODUyMTk1MTc0NjY1MjUzMw",
               "creation_date": "2025-05-07"
            }
         ]
      }
   ],
   "paging": {
      "cursors": {
         "before": "QVFIUmcwb3MtZAkhkWUhjZAElXQ2tHUXMwbjdjRi1NeUg5aWlIN3liSzZAfN1FmdnVIRkhmSVU3OUtpQ3FweUp3NE1TYWJob3k1NGIzeDRIdjdlMXRZAcWtyWGxn",
         "after": "QVFIUmcwb3MtZAkhkWUhjZAElXQ2tHUXMwbjdjRi1NeUg5aWlIN3liSzZAfN1FmdnVIRkhmSVU3OUtpQ3FweUp3NE1TYWJob3k1NGIzeDRIdjdlMXRZAcWtyWGxn"
      }
   }
}

{
   "data": [
      {
         "message": "Success",
         "all_ban_ids": [
    {
               "ban_id": "MTI0MjQ3MTc0MDk2NTYwNg",
               "creation_date": "2025-05-27"
            },
            .
		 .
		  <500 ban_ids here>
		 .
		 .
		 .
         ]
      }
   ],
   "paging": {
     "cursors": {
        "before": "QVFIUkIxLS1XNDhSdHJFQXlELXplbnZAINnd6cmc5ZAkhEOVJPU3ViR1F4TFQ4V3N3NWwxV1Y0T05rLWk4NWhKM2dGY2d2aGpaZAERfd0lSOXRYejdWbTJYYUhB",
        "after": "QVFIUjlMcGJuRGxHUFRjT1lLOS04cGdRZAHpPSDFBQnA0aEJOZA3hmeDVaWEVSdXozM2FkOV9jVFhoVy1Jb08xRzlZAOVlROWNvTlNxMUpveUphZAmEzY2ZAHNFJ3"
     },
     "next": "https://graph.oculus.com/platform_integrity/device_ban_ids?access_token=<access_token>&pretty=1&limit=500&after=QVFIUjlMcGJuRGxHUFRjT1lLOS04cGdRZAHpPSDFBQnA0aEJOZA3hmeDVaWEVSdXozM2FkOV9jVFhoVy1Jb08xRzlZAOVlROWNvTlNxMUpveUphZAmEzY2ZAHNFJ3"
  }
}

https://graph.oculus.com/platform_integrity/device_ban?method=POST&ban_id=<ban_id>&is_banned=<is_banned>&remaining_time_in_minute=<remaining_time_in_minute>&access_token=<access_token>

{
   "message": "Success",
   "ban_id": ""
}

{
   "message": "Success",
   "ban_id": "NjIxMzI3MTc0MTgzMzkzNw"
}

{
   "error": {
      "message": "There is no record of this ban_id. Please check the ban_id and try again. If you don't know the specific ban_id, query the Device Ban IDs endpoint to see a list of all the ban_ids currently active for your application.",
      "type": "OCApiException",
      "code": -1,
      "error_data": {


      },
      "error_subcode": 1614033,
      "fbtrace_id": "AzBdHW5FhJ8xtfLLzQr90Gz"
   }
}

​​{
   "error": {
      "message": "The App ID of the Access Token does not match the Ban ID, please check the Ban ID/Access Token and try again",
      "type": "OCApiException",
      "code": -1,
      "error_data": {


      },
      "error_subcode": 1614036,
      "fbtrace_id": "AIp_qT4f8skiZrs1NI2xPjN"
   }
}

https://graph.oculus.com/platform_integrity/device_ban?method=POST&unique_id=<unique_id>&is_banned=<is_banned>&remaining_time_in_minute=<remaining_time_in_minute>&access_token=<access_token>

{
   "message": "Success",
   "ban_id": ""
}

{
   "message": "Success",
   "ban_id": ""
}

{
   "message": "Success",
   "ban_id": "NjIxMzI3MTc0MTgzMzkzNw"
}

 https://graph.oculus.com/platform_integrity/device_ban_status?unique_id =<unique_id>&access_token=<access_token>

{
   "data": [
      {
         "message": "Success",
         "is_banned": true,
         "remaining_time_in_minute": 12
      }
   ]
}

{
   "error": {
      "message": "There is no record of this Unique ID. Please check that the Unique ID matches what is given in the Attestation Token and try again. Note that Unique IDs will change every 30 days for each application and device, make sure the Unique ID is up to date.",
      "type": "OCApiException",
      "code": 1,
      "error_data": {


      },
      "error_subcode": 1614026,
      "fbtrace_id": "AUhV19OFsDqs6gTXn7zVybm"
   }
}

{
   "error": {
      "message": "The App ID of the Access Token does not match the Unique ID, please check the Unique ID/Access Token and try again",
      "type": "OCApiException",
      "code": 1,
      "error_data": {


      },
      "error_subcode": 1614027,
      "fbtrace_id": "AHBbS8rEDcgajcgpQcqtVO1"
   }
}