Android zero-tap sign-in restoration: comparing approaches for self-hosted apps

[TimoPtr]

Hi I'm one of the maintainer of the Home Assistant Android app! We’re investigating Google’s upcoming zero-tap sign-in restoration requirement https://support.google.com/googleplay/android-developer/answer/17492799?#zero-tap_sign-in_restoration for Home Assistant, which takes effect in April 2027.

Have you already looked into supporting Restore Credentials in Jellyfin? Since both projects connect to user-hosted servers, we might face similar challenges around RP IDs, domain association, and instances that are only accessible locally or without HTTPS.

We’re tracking our investigation in this Home Assistant discussion. We haven’t settled on an approach yet and would be interested in comparing notes.

This isn’t a bug report or a request for an immediate implementation, just an opportunity to share findings on a requirement that appears to affect both projects.

[nielsvanvelzen]

Hi, thanks for the heads up! I wasn't aware of this new policy yet. I'll have to read through it to see how it will affect us and what we can do.

We've had policy issues for well over a year on our mobile app, and only with the recent release (2.7) was I finally able to solve all of them. Would be a shame if Google downranks us again 😅

[TimoPtr]

I hope that it won't be the case. Don't hesitate to follow the discussion on the Home Assistant thread on Github. I'm going to keep it updated and also hopefully others are going to contribute too.