Android Question Google APIs restrictions

[iCAB]

Hi There

I am using Google APIs for: Directions, Auto Complete & nearby places.
Currently I am using https to retrieve the info.

I believe in order to use the APIs from within the app, I have to have no restrictions on "HTTP referrers" in Google Console.

If I am not mistaken, in this case we can't limit the keys by "Android Apps" as we are using https.
Is this correct? and if so, is there a better approach that we can use?

Thanks
iCAB

 

[Erel]

Yes. You can only limit it based on the signing key when you use the relevant Android SDK.

 

[iCAB]

Yes. You can only limit it based on the signing key when you use the relevant Android SDK.

Hi Erel
I am not sure I understood you correctly.
Does this mean, for https direction etc.... we can't limit the keys?, and if so, is there an alternative solution for us to get directions, etc...?

Thanks
iCAN

 

[DonManfred]

Does this mean, for https direction etc.... we can't limit the keys?

you can limit the key in the google console to be valid for your app only. Add your apps packagename and sha

 

[iCAB]

you can limit the key in the google console to be valid for your app only. Add your apps packagename and sha

Hi Don, thanks for your reply.

But the https doesn't include my package name, so how is it possible for google to determine the source of the call