Error validating origin for android app

[i11010520]

Running app-release-signed.apk on Android phone, stopped by RP server 500: Error validating origin when register/finish.

I implement RP server with go-fiber and go-webauthn, config like this:

  "RP_ID": "someclient.netlify.app",
  "RP_ORIGINS": [
    "https://someclient.netlify.app",
    "android:apk-key-hash:d65a10...",
    "android:apk-key-hash:6B54..."
  ],

CORS is valid for all origins temporarily, so this error should be thrown from webauthn.

The following block is register/finish request sent to RP server:

Header:
X-Fc-Function-Memory=256&X-Fc-Function-Name=dudou_func&X-Fc-Tracing-Jaeger-Endpoint=&X-Forwarded-For=120.244.236.96&X-Fc-Region=cn-beijing&X-Fc-Request-Id=1-6825cc7f-134beead-e5ef28d6168e&X-Debug=true&X-Fc-Access-Key-Secret=&X-Fc-Account-Id=1669720845390245&X-Fc-Function-Handler=bootstrap&X-Fc-Function-Timeout=30&X-Fc-Control-Path=/http-invoke&Accept-Encoding=gzip&X-Fc-Eagleeye-Userdata=&X-Fc-Tracing-Opentracing-Span-Baggages=&X-Fc-Tracing-Opentracing-Span-Context=&X-Forwarded-Proto=https&X-Fc-Security-Token=&X-Fc-Api-Server-Ip=&X-Fc-Eagleeye-Rpcid=&X-Fc-Service-Name=&X-Fc-Retry-Count=0&X-Fc-Service-Logstore=default-logs&User-Agent=Dart/3.7 (dart:io)&X-Fc-Client-Ip=&X-Fc-Qualifier=LATEST&Host=dudou-func-mdsmjwoqyz.cn-beijing.fcapp.run&Content-Length=849&Content-Type=application/json&Ngrok-Skip-Browser-Warning=true&X-Fc-Base-Path=/auth&X-Fc-Version-Id=&X-Fc-Service-Logproject=serverless-cn-beijing-b7e5a78e-ddb4-5657-a623-988848ae8e28&X-Fc-Access-Key-Id=&X-Fc-Eagleeye-Traceid=

Body:
{"id":"KK485bREI3LvxZTzktwv7A","type":"public-key","rawId":"KK485bREI3LvxZTzktwv7A","clientExtensionResults":{},"response":{"clientDataJSON":"eyJ0e...bSw"},"sessionData":{"challenge":"XDhRKLLKghSeq-kSKo1D9z3i3_1FMcgbBlWP85tgA0o","rpId":"someclient.netlify.app","user_id":"BwAAAAAAAAAAAA==","expires":"0001-01-01T00:00:00Z","userVerification":""}}

RP server response: 500 | Error validating origin