[amplify_secure_storage] PlatformException(InvalidProtocolBufferException) in Amplify.configure

[asaarnak]

Exception during Amplify plugin configure.
Dependencies with latest transitive dependencies.
amplify_flutter: ^1.0.0-next.2
amplify_auth_cognito: ^1.0.0-next.2

amplify-flutter/packages/secure_storage/amplify_secure_storage/android/src/main/kotlin/com/amazonaws/amplify/amplify_secure_storage/amplify_secure_storage/EncryptedKeyValueRepository.kt

Line 38 in 9e7e9ee

override fun get(dataKey: String): String? = getSharedPreferences().getString(dataKey, null)

Stacktraces that are related.

AuthPreconditionException(message: Credential store has error. Re-load before continuing., recoverySuggestion: null, underlyingException: null)

AuthException(message: PlatformException(c0, com.google.crypto.tink.shaded.protobuf.c0: Protocol message contained an invalid tag (zero)., Cause: null, Stacktrace: com.google.crypto.tink.shaded.protobuf.c0: Protocol message contained an invalid tag (zero).
	at com.google.crypto.tink.shaded.protobuf.z.J(Unknown Source:75)
	at com.google.crypto.tink.shaded.protobuf.z.G(Unknown Source:2)
	at xa.c0.W(Unknown Source:2)
	at ua.d.read(Unknown Source:8)
	at qa.b.a(Unknown Source:0)
	at ua.a$b.e(Unknown Source:27)
	at ua.a$b.f(Unknown Source:0)
	at ua.a$b.d(Unknown Source:11)
	at androidx.security.crypto.a.b(Unknown Source:50)
	at com.amazonaws.amplify.amplify_secure_storage.amplify_secure_storage.EncryptedKeyValueRepository.getSharedPreferences(Unknown Source:14)
	at com.amazonaws.amplify.amplify_secure_storage.amplify_secure_storage.EncryptedKeyValueRepository.get(Unknown Source:5)
	at com.amazonaws.amplify.amplify_secure_storage.amplify_secure_storage.AmplifySecureStoragePlugin.read(Unknown Source:19)
	at com.amazonaws.amplify.amplify_secure_storage.amplify_secure_storage.Messages$AmplifySecureStorageApi.lambda$setup$0(Unknown Source:30)
	at com.amazonaws.amplify.amplify_secure_storage.amplify_secure_storage.Messages$AmplifySecureStorageApi.c(Unknown Source:0)
	at com.amazonaws.amplify.amplify_secure_storage.amplify_secure_storage.a.a(Unknown Source:2)
	at io.flutter.plugin.common.a$b.a(Unknown Source:17)
	at se.c.l(Unknown Source:18)
	at se.c.m(Unknown Source:20)
	at se.c.i(Unknown Source:0)
	at se.b.run(Unknown Source:12)
	at se.c$h.d(Unknown Source:20)
	at se.c$h.e(Unknown Source:0)
	at se.c$h.b(Unknown Source:0)
	at se.d.run(Unknown Source:2)
	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1137)
	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:637)
	at java.lang.Thread.run(Thread.java:1012)
, null), recoverySuggestion: null, underlyingException: null). Error thrown null.
       at AmplifyAuthCognitoDart.configure(auth_plugin_impl.dart:302)
       at AmplifyAuthCognito.configure(auth_plugin_impl.dart:138)
       at Future.wait.<fn>(wait.java)
       at AmplifyHybridImpl.configurePlatform(hybrid_impl.dart:35)
       at AmplifyClass.configure(amplify_class.dart:107)

       at StateMachine._emitError(state_machine.dart:197)
       at StateMachine._listenForEvents(state_machine.dart:173)
       at AmplifySecureStorageApi.read(messages.android.g.dart:53)
       at CredentialStoreStateMachine.getVersion(credential_store_state_machine.dart:67)
       at CredentialStoreStateMachine.onMigrateLegacyCredentialStore(credential_store_state_machine.dart:281)
       at CredentialStoreStateMachineBase.resolve(credential_store_state_machine_base.dart:45)

       at StateMachine._emitError(state_machine.dart:197)
       at StateMachine._listenForEvents(state_machine.dart:173)
       at CredentialStoreStateMachine.getCredentialsResult(credential_store_state_machine.dart:59)
       at FetchAuthSessionStateMachine.onFetchAuthSession(fetch_auth_session_state_machine.dart:179)
       at FetchAuthSessionStateMachineBase.resolve(fetch_auth_session_state_machine_base.dart:37)
       at StateMachine._listenForEvents(state_machine.dart:171)

       at StateMachine._emitError(state_machine.dart:197)
       at StateMachine._listenForEvents(state_machine.dart:173)
       at FetchAuthSessionStateMachine.getLatestResult(fetch_auth_session_state_machine.dart:68)
       at SignInStateMachine._saveAuthResult(sign_in_state_machine.dart:636)
       at SignInStateMachine._processChallenge(sign_in_state_machine.dart:748)
       at SignInStateMachine.resolve(sign_in_state_machine.dart:858)
       at StateMachine._listenForEvents(state_machine.dart:171)

[asaarnak]

Phone: SM N986B
After clearing app cache the exception still occurred.
After clearing app data the exception is gone.

[asaarnak]

Maybe related to this dependency version:
tink-crypto/tink#413
https://issuetracker.google.com/issues/210008257

amplify-flutter/packages/secure_storage/amplify_secure_storage/android/build.gradle

Line 50 in 9e7e9ee

implementation 'androidx.security:security-crypto:1.0.0'

[Jordan-Nelson]

Hello @asaarnak - Thanks for opening the issue and providing the links to the other issues. I agree that this looks related to the other issues you linked.

Are you able to reproduce this consistently?

[asaarnak]

Nope, it has happened only once and only for 1 user.

[Jordan-Nelson]

Okay thanks. I think https://issuetracker.google.com/issues/164901843 is also reporting the same issue (looking at the stack trace provided for v1.1.0-alpha02 in the issue).

[asaarnak]

This happened again for one of our tester that downloaded and installed app from APK, we have no errors from google play installs on production. Clearing cache helped.

[Jordan-Nelson]

@asaarnak - Thanks for letting me know. I believe I know what the cause is. The encrypted data stored with EncryptedSharedPrefernces is backed up, but the keystore info required to decrypt the data is not. This results in an error when trying to decrypt the info. I will attempt to reproduce this and then look into a fix.

[asaarnak]

On Android 3rd time this happened, we don't know who this was or how he install apk or google play.

Also noticed this issue for 2 users on iOS crash logs.
Should i create new task for iOS ?
Maybe related to this: https://developer.apple.com/forums/thread/114542
Seems that app is locked maybe and app is on background thats why this error happens.
https://stackoverflow.com/questions/48068325/keychain-access-error-25308-errsecinteractionnotallowed

SecureStorageException(
  
  message: An unknown exception occurred.,
  
  recoverySuggestion: An unknown exception occurred. Please take a look at https://github.com/aws-amplify/amplify-flutter/issues to see if there are any existing issues that match your scenario, and file an issue with the details of the bug if there isn't.,
  
  underlyingException: SecurityFrameworkError: {code: -25308, message: No error string is available.}),
  
  stackTrace=
  
0  ???                            0x0 AmplifySecureStorageCupertino._add + 146 (amplify_secure_storage_cupertino.dart:146)
1  ???                            0x0 AmplifySecureStorageCupertino.write.<fn> + 65 (amplify_secure_storage_cupertino.dart:65)
2  ???                            0x0 (null).using + 124 (arena.dart:124)
3  ???                            0x0 AmplifySecureStorageCupertino.write + 63 (amplify_secure_storage_cupertino.dart:63)
4  ???                            0x0 AmplifySecureStorageDartMixin.write + 42 (amplify_secure_storage_mixin.vm.dart:42)
5  ???                            0x0 SecureStorageWorker.run + 73 (secure_storage_worker.dart:73)
6  ???                            0x0 (null)._run + 14 (secure_storage_worker.worker.vm.dart:14)

Seems to be related stacktrace:

0  ???                            0x0 CredentialStoreStateMachine.getCredentialsResult + 59 (credential_store_state_machine.dart:59)
1  ???                            0x0 FetchAuthSessionStateMachine.onFetchAuthSession + 179 (fetch_auth_session_state_machine.dart:179)
2  ???                            0x0 FetchAuthSessionStateMachineBase.resolve + 37 (fetch_auth_session_state_machine_base.dart:37)
3  ???                            0x0 StateMachine._listenForEvents + 171 (state_machine.dart:171)