19. Android asset links

[Miracle656]

Goal: Set up the Android equivalent of passkey domain binding via Digital Asset Links,
proving the app and website belong to the same entity. This is self-serve and needs no
paid account, so it should land first and unblock real-device passkey testing on Android.
Create: host /.well-known/assetlinks.json on the domain with the app's signing-cert SHA-256; add intent filter / autoVerify in app.config.ts.
Notes: self-serve (no paid account) — do this before iOS.
Acceptance: Digital Asset Links validator passes; passkey shared with web RP ID.

---

From issues.md (backlog item 19). Cross-refs like "backlog #N" point to other items in that file.

---

Required: Before submitting, join the contributor Telegram so your work can be tracked and counted toward the Stellar Wave: https://t.me/+fxHXq8f1SwlkZDBk

[Osuolale1]

@Osuolale1 has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

I have experience with Android app links and authentication. I’ll configure Digital Asset Links, add assetlinks.json and autoVerify, validate the setup, and ensure Android passkeys work seamlessly with the web RP ID.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Osuolale1 to this issue.

[drips-wave]

Congratulations, @Osuolale1! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on July 30, 2026.

🧑‍💻 @Osuolale1: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊

[Miracle656]

Hi @Osuolale1 — flagging this before you put more time into it.

Auditing the open issues against the code, this one looks already implemented on main: frontend/mobile/app.config.ts already declares verified app links (intentFilters with autoVerify: true), and frontend/wallet/public/.well-known/assetlinks.json is served with the app cert fingerprint (commit 3788c52).

I'm not closing it over your head, and I might be wrong about the scope. What I verified is that the code exists and is wired up — I did not check it line by line against every acceptance criterion in this issue. So:

• If what's on main covers what this issue asked for, say so and I'll close it out.
• If something here is genuinely still missing or wrong, tell me what and I'll narrow the issue down to exactly that, so the remaining work is clear and creditable.

Either way, apologies for the wasted cycles — this should have been closed when the work landed, and that's on the maintainer side, not yours.