mirror of
https://github.com/screentinker/screentinker.git
synced 2026-08-13 22:03:13 -06:00
275e1683b8
A customer read the device page's IP as their screen's address and reported it as wrong.
It was not wrong, it was a different thing: devices.ip_address is the PUBLIC address the
server sees the connection arrive from. Both are useful — you want the public one to
recognise a site, and the local one to actually reach the panel — so the page now shows
each, labelled.
The player already computed its own address for the connectivity report; it just never
reported it. Read straight off the interfaces, so Ethernet panels get it too, and it needs
no permission. Stored on device_telemetry beside wifi_ssid/wifi_rssi, where the
per-heartbeat network facts already live, rather than as another devices column.
The same customer saw "Unknown" for the Wi-Fi name and assumed it needed device-owner
access. It needs LOCATION: Android 8.1+ returns the literal "<unknown ssid>" to an app
without it. So "Unknown" was us reporting a permission gap as if the network had no name.
The player now distinguishes not-allowed-to-know from genuinely-no-Wi-Fi, and the page says
"Needs location permission" instead of a blank. The permission is declared but NEVER
requested at startup and nothing else uses it — a signage player demanding location to
display a network name is a bad trade. It is an opt-in row on the setup screen, using the
same Enable/Manage pattern, and refusing it changes that one field and nothing else.
Also caught by the test suite, and worth recording: the first version of this dropped the
comma in the device SELECT list ("t.uptime_seconds t.local_ip"), which 500'd the endpoint
and failed seven tests that never mention telemetry. Verified end to end afterwards —
public and local addresses both returned, distinct, from a real request.
188 lines
9.3 KiB
XML
188 lines
9.3 KiB
XML
<?xml version="1.0" encoding="utf-8"?>
|
|
<manifest xmlns:android="http://schemas.android.com/apk/res/android">
|
|
|
|
<uses-permission android:name="android.permission.INTERNET" />
|
|
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
|
|
<uses-permission android:name="android.permission.ACCESS_WIFI_STATE" />
|
|
<uses-permission android:name="android.permission.WAKE_LOCK" />
|
|
<uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
|
|
<uses-permission android:name="android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK" />
|
|
<uses-permission android:name="android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION" />
|
|
<uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />
|
|
|
|
<!-- OPTIONAL, and never requested at startup. Android 8.1+ hides the connected Wi-Fi network
|
|
name from apps without location permission, so the device page can only show "unavailable"
|
|
without it. A signage player should not demand location to display a network name, so this
|
|
is opt-in from the setup screen and nothing else depends on it: not granting it changes
|
|
only that one field. Coarse is enough below Android 10; fine is required from 10 onwards. -->
|
|
<uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION" />
|
|
<uses-permission android:name="android.permission.ACCESS_FINE_LOCATION" />
|
|
<uses-permission android:name="android.permission.READ_EXTERNAL_STORAGE" />
|
|
<uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE" />
|
|
<uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
|
|
<uses-permission android:name="android.permission.USE_FULL_SCREEN_INTENT" />
|
|
<uses-permission android:name="android.permission.REQUEST_INSTALL_PACKAGES" />
|
|
<uses-permission android:name="android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS" />
|
|
<uses-permission android:name="android.permission.SYSTEM_ALERT_WINDOW" />
|
|
<!-- #160 Track-A: system brightness + screen-off timeout (Tier 1). Requires a one-time
|
|
ACTION_MANAGE_WRITE_SETTINGS grant; the app degrades gracefully without it. -->
|
|
<uses-permission android:name="android.permission.WRITE_SETTINGS" />
|
|
|
|
<application
|
|
android:name=".RemoteDisplayApp"
|
|
android:allowBackup="false"
|
|
android:icon="@android:drawable/ic_media_play"
|
|
android:label="RemoteDisplay"
|
|
android:largeHeap="true"
|
|
android:theme="@style/Theme.RemoteDisplay"
|
|
android:usesCleartextTraffic="true"
|
|
android:supportsRtl="true">
|
|
|
|
<!-- Main fullscreen media player activity -->
|
|
<activity
|
|
android:name=".MainActivity"
|
|
android:exported="true"
|
|
android:configChanges="orientation|screenSize|keyboardHidden"
|
|
android:screenOrientation="landscape"
|
|
android:theme="@style/Theme.RemoteDisplay.Fullscreen"
|
|
android:keepScreenOn="true"
|
|
android:launchMode="singleTask">
|
|
<intent-filter>
|
|
<action android:name="android.intent.action.MAIN" />
|
|
<category android:name="android.intent.category.LAUNCHER" />
|
|
<category android:name="android.intent.category.LEANBACK_LAUNCHER" />
|
|
</intent-filter>
|
|
<intent-filter>
|
|
<action android:name="android.intent.action.MAIN" />
|
|
<category android:name="android.intent.category.HOME" />
|
|
<category android:name="android.intent.category.DEFAULT" />
|
|
</intent-filter>
|
|
</activity>
|
|
|
|
<!-- Screen capture permission request (transparent) -->
|
|
<activity
|
|
android:name=".ScreenCapturePermissionActivity"
|
|
android:exported="false"
|
|
android:theme="@android:style/Theme.Translucent.NoTitleBar"
|
|
android:screenOrientation="landscape" />
|
|
|
|
<!-- Initial setup wizard (permissions) -->
|
|
<activity
|
|
android:name=".SetupActivity"
|
|
android:exported="false"
|
|
android:screenOrientation="landscape"
|
|
android:theme="@style/Theme.RemoteDisplay.Fullscreen" />
|
|
|
|
<!-- #device-owner: MDM-deploy-only guided screen to enable the accessibility service
|
|
(remote control). Self-guards to owner; a normal install never routes here. -->
|
|
<activity
|
|
android:name=".OwnerAccessibilityActivity"
|
|
android:exported="false"
|
|
android:screenOrientation="landscape"
|
|
android:theme="@style/Theme.RemoteDisplay.Fullscreen" />
|
|
|
|
<!-- Provisioning/setup activity -->
|
|
<activity
|
|
android:name=".ProvisioningActivity"
|
|
android:exported="false"
|
|
android:screenOrientation="landscape"
|
|
android:theme="@style/Theme.RemoteDisplay.Fullscreen" />
|
|
|
|
<!-- WebSocket foreground service. #5: declares ONLY mediaPlayback - the
|
|
always-on service must not claim the mediaProjection FGS type, which
|
|
Android 14+ rejects unless a projection consent token is held. -->
|
|
<service
|
|
android:name=".service.WebSocketService"
|
|
android:exported="false"
|
|
android:foregroundServiceType="mediaPlayback" />
|
|
|
|
<!-- #5: dedicated MediaProjection foreground service for system screen
|
|
capture. Started only after the user grants consent, so claiming the
|
|
mediaProjection FGS type is valid on Android 14+. -->
|
|
<service
|
|
android:name=".service.MediaProjectionService"
|
|
android:exported="false"
|
|
android:foregroundServiceType="mediaProjection" />
|
|
|
|
<!-- Accessibility service for power controls -->
|
|
<service
|
|
android:name=".service.PowerAccessibilityService"
|
|
android:exported="true"
|
|
android:permission="android.permission.BIND_ACCESSIBILITY_SERVICE">
|
|
<intent-filter>
|
|
<action android:name="android.accessibilityservice.AccessibilityService" />
|
|
</intent-filter>
|
|
<meta-data
|
|
android:name="android.accessibilityservice"
|
|
android:resource="@xml/accessibility_service_config" />
|
|
</service>
|
|
|
|
<!-- Boot receiver for auto-start -->
|
|
<receiver
|
|
android:name=".service.BootReceiver"
|
|
android:enabled="true"
|
|
android:exported="true">
|
|
<intent-filter>
|
|
<action android:name="android.intent.action.BOOT_COMPLETED" />
|
|
<action android:name="android.intent.action.QUICKBOOT_POWERON" />
|
|
<action android:name="com.htc.intent.action.QUICKBOOT_POWERON" />
|
|
</intent-filter>
|
|
</receiver>
|
|
|
|
<!-- #96: relaunch the player after a self-update (OTA). MY_PACKAGE_REPLACED is
|
|
delivered to the freshly-installed app; the receiver relaunches via the same
|
|
cascade as boot so the screen doesn't drop to the launcher after an update. -->
|
|
<receiver
|
|
android:name=".service.PackageReplacedReceiver"
|
|
android:enabled="true"
|
|
android:exported="true">
|
|
<intent-filter>
|
|
<action android:name="android.intent.action.MY_PACKAGE_REPLACED" />
|
|
</intent-filter>
|
|
</receiver>
|
|
|
|
<!-- #161 device-owner foundation. Enrolled via `adb dpm set-device-owner` or QR provisioning.
|
|
Optional power-up: absent it the app runs fully at Tier 0/1 (STPolicy degrades safely). -->
|
|
<receiver
|
|
android:name=".admin.STDeviceAdminReceiver"
|
|
android:description="@string/device_admin_description"
|
|
android:exported="true"
|
|
android:permission="android.permission.BIND_DEVICE_ADMIN">
|
|
<meta-data
|
|
android:name="android.app.device_admin"
|
|
android:resource="@xml/device_admin" />
|
|
<intent-filter>
|
|
<action android:name="android.app.action.DEVICE_ADMIN_ENABLED" />
|
|
</intent-filter>
|
|
</receiver>
|
|
|
|
<!-- #device-owner: Android 10+ fully-managed provisioning handshake. REQUIRED for QR/NFC
|
|
enrollment on Android 12+ — without a GET_PROVISIONING_MODE / ADMIN_POLICY_COMPLIANCE
|
|
handler the platform aborts provisioning after install ("something went wrong").
|
|
System-only (BIND_DEVICE_ADMIN); translucent + finishes immediately (no visible UI). -->
|
|
<activity
|
|
android:name=".admin.ProvisioningActivity"
|
|
android:exported="true"
|
|
android:permission="android.permission.BIND_DEVICE_ADMIN"
|
|
android:theme="@android:style/Theme.Translucent.NoTitleBar">
|
|
<intent-filter>
|
|
<action android:name="android.app.action.GET_PROVISIONING_MODE" />
|
|
<action android:name="android.app.action.ADMIN_POLICY_COMPLIANCE" />
|
|
<category android:name="android.intent.category.DEFAULT" />
|
|
</intent-filter>
|
|
</activity>
|
|
|
|
<!-- FileProvider for APK updates -->
|
|
<provider
|
|
android:name="androidx.core.content.FileProvider"
|
|
android:authorities="${applicationId}.fileprovider"
|
|
android:exported="false"
|
|
android:grantUriPermissions="true">
|
|
<meta-data
|
|
android:name="android.support.FILE_PROVIDER_PATHS"
|
|
android:resource="@xml/file_paths" />
|
|
</provider>
|
|
|
|
</application>
|
|
</manifest>
|