Skip to content

[BOUNTY] Dott, a major european rentable bike/scooter app, doesn't work [100$] #2851

@kaduvert

Description

@kaduvert

Affected app
Name: Dott
Package id: com.ridedott.rider

Describe the bug
Signing in or signing up fails, seemingly because of a firebase error

To Reproduce
Steps to reproduce the behavior:

  1. get Dott
  2. Click on sign up
  3. enter phone number
  4. click sign up

Expected behavior
sends sms verification or proceeds in general

Screenshots

sign up error page

screenshot

dott vehicle coverage

screenshot

System
Android Version: 15
Custom ROM: LineageOS+microg 22.1

microG
microG Core version: 0.3.6.244735
microG Self-Check results: All ticked

Additional context
full logcat of an app start and signup attempt, filtering out all logs, except those coming from com.ridedott.rider with personal or identifying information replaced by [...]:

dott 06_04-09-30-30_733.log

Likely critical lines from the log:

1743924520.834 10285 20276 23037 W LocalRequestInterceptor: Error getting App Check token; using placeholder token instead. Error: com.google.firebase.FirebaseException: Error returned from API. code: 403 body: App attestation failed.
1743924521.066 10285 20276 23037 E FirebaseAuth: [SmsRetrieverHelper] SMS verification code request failed: unknown status code: 17499 Firebase App Check token is invalid.
1743924521.067 10285 20276 20276 D FirebaseAuth: Invoking original failure callbacks after phone verification failure for (my phone number), error - An internal error has occurred. [ Firebase App Check token is invalid. ]

microg Google device registration is enabled, as is cloud messaging and "SafetyNet".
my device meets basic integrity and device integrity, uses sdk level 35

Possibly related: #1967, #1281

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions