Android: get user ID without requiring scary (for user) permissions?
In order to manage user preferences, at present I'm grabbing the google user name (effectively the email address they've registered to the device) and using (a hash of) that as a "user ID" to distinguish between different users. Something along the lines of what is described here.
That all works fine, but some users are (understandably) scared off by any permission that seems to give the app some evil power to trawl through their account info or contacts.
EDIT: this issue is even more acute with the way in which Google has now implemented Permission Groups in the Android 6 runtime permission schema. They have put GET_ACCOUNTS into the CONTACTS permission group. So now, in order to generate a unique anonymous User ID, the user has to be presented with a dialog that says:
Allow this app to access your contacts? | Deny | Allow |
How misleading is that?? My app has no wish to access contacts, but the user is being asked to grant permission for the app to access contacts! Yes, there is an opportunity to explain to the user with a separate dialog that, in fact, access to contacts is NOT required, but then they still get the stock system dialog that asks them to grant permission to access contacts... naturally they will think "why am I being asked to grant this permission if access to contacts is not required?" and "do I really trust the developer? they say access to contacts is not required, but is that really true?"... very very confusing and a very poor user experience IMHO (and the opinion of others too).
I'd rather just avoid all of this hassle and confusion and obtain a unique user ID without special permissions being required.
So is there a stock function or method in the SDK that will return a unique user ID for the user, without requiring any additional permission? I'm kinda surprised if there isn't, because it would seem to be quite a common thing to want to do... to have a user ID for managing app users.
Two points:
(a) I only need an anonymous user ID... I don't actually need the user's email address, nor would I ever want the user's email address. So I can't see why google can't provide a getUserID() method that returns a unique anonymised ID, without having to grant special permissions to the app.
(b) It has to be a user ID, not a device ID, so that it will work across all of the user's devices registered to the same google account.
Thanks.
Answer
If you use Google Play Services you can get the account type and account name without any extra permissions.
First, add the following dependency to build.gradle:
compile 'com.google.android.gms:play-services-auth:8.4.0'
Next, launch the account chooser intent:
Intent intent = AccountPicker.newChooseAccountIntent(null, null,
new String[]{GoogleAuthUtil.GOOGLE_ACCOUNT_TYPE},
false, null, null, null, null);
try {
startActivityForResult(intent, REQUEST_CODE_EMAIL);
} catch (ActivityNotFoundException e) {
// This device may not have Google Play Services installed.
// TODO: do something else
}
Finally, override onActivityResult to get the account type and account name:
@Override
protected void onActivityResult(int requestCode, int resultCode, Intent data) {
if (requestCode == REQUEST_CODE_EMAIL && resultCode == RESULT_OK) {
String accountName = data.getStringExtra(AccountManager.KEY_ACCOUNT_NAME);
String accountType = data.getStringExtra(AccountManager.KEY_ACCOUNT_TYPE);
// TODO: do something with the accountName
return;
}
super.onActivityResult(requestCode, resultCode, data);
}