Verified Email
Provides a complete workflow for implementing verified email retrieval on Android...
Install
npx skills add android/skills --skill verified-email -g -a claude-code -y- Repository
- android/skills10.2k
- Category
- Mobile
- Updated
- 6d ago
- License
- Complete terms in LICENSE.txt
- Context cost
- Mediumabout 3,000 tokens
- Runs scripts
- No, instructions only
What it does
Provides a complete workflow for implementing verified email retrieval on Android Credential Manager API. Use this skill to integrate a secure, OTP-less email verification flow into an Android app. This skill solves the problem of high-friction sign-up processes by leveraging cryptographically verified credentials from trusted providers like Google.
Fundamentals
- Overview of Digital Credentials: Learn about cryptographically verifiable documents and the role of Credential Manager.
- Glossary : Definitions for
dcql_query,UserInfoCredential, andGetDigitalCredentialOption.
Standards & Examples
- OpenID4VP Standard: The specification used to create digital credentials requests.
- Digital Credentials Demo: Example requests and cross-platform testing tool.
- W3C Verifiable Credentials: The data model for cryptographically secured claims.
- SD-JWT: Selective Disclosure JSON Web Token format used for responses.
- mdoc: ISO/IEC 18013-5 standard for mobile documents.
Requirements
- SDK Version: Minimum SDK 28 (Android 9) is required.
- GMS Version: Google Play services version 25.49.x or higher.
Use Cases
Email verification is applicable for the following use cases:
- Account Creation/Sign-up: Remove friction by skipping manual email verification.
- Account Recovery: Securely verify email ownership during recovery flows.
- Re-authentication: Versatile verification for high-risk actions, independent of the initial sign-in method.
Limitations & Nuances
- Workspace Accounts: Google does not issue verifiable credentials for Google Workspace Accounts.
- Freshness: For non-@gmail.com addresses, Google verifies the email at account creation but there is no freshness claim; implement an additional challenge like an OTP.
