@algorandfoundation/react-native-passkey-autofill 1.0.0-canary.1 → 1.0.0-canary.10

package/.eslintrc.js

@@ -2,4 +2,7 @@ module.exports = {
   root: true,
   extends: ['universe/native', 'universe/web'],
   ignorePatterns: ['build'],
+  rules: {
+    'node/handle-callback-err': 'off',
+  },
 };

package/.releaserc

@@ -0,0 +1,23 @@
+{
+  "branches": [
+    "release",
+    {
+      "name": "main",
+      "prerelease": "canary"
+    }
+  ],
+  "plugins": [
+    "@semantic-release/commit-analyzer",
+    "@semantic-release/release-notes-generator",
+    "@semantic-release/changelog",
+    "@semantic-release/npm",
+    [
+      "@semantic-release/git",
+      {
+        "assets": ["package.json", "package-lock.json", "CHANGELOG.md"],
+        "message": "chore(release): ${nextRelease.version} [skip ci]\n\n${nextRelease.notes}"
+      }
+    ],
+    "@semantic-release/github"
+  ]
+}

package/CHANGELOG.md

@@ -0,0 +1,42 @@
+# [1.0.0-canary.10](https://github.com/algorandfoundation/react-native-passkey-autofill/compare/v1.0.0-canary.9...v1.0.0-canary.10) (2026-03-30)
+
+
+### Bug Fixes
+
+* bouncy castle provider insertion order ([9e9039d](https://github.com/algorandfoundation/react-native-passkey-autofill/commit/9e9039deab02f75f5a4397cedc098c0ca2e24875))
+
+# [1.0.0-canary.9](https://github.com/algorandfoundation/react-native-passkey-autofill/compare/v1.0.0-canary.8...v1.0.0-canary.9) (2026-03-30)
+
+
+### Bug Fixes
+
+* x logins, refactor example views to be dialogs ([e7a1ccf](https://github.com/algorandfoundation/react-native-passkey-autofill/commit/e7a1ccf91f88b5c369ff3082f06d538fc8b3db89))
+
+# [1.0.0-canary.8](https://github.com/algorandfoundation/react-native-passkey-autofill/compare/v1.0.0-canary.7...v1.0.0-canary.8) (2026-03-27)
+
+
+### Features
+
+* passkey added and authenticated events ([b9871f4](https://github.com/algorandfoundation/react-native-passkey-autofill/commit/b9871f475a9a633ae98d30a702ef2814ec8ae5e0))
+
+# [1.0.0-canary.7](https://github.com/algorandfoundation/react-native-passkey-autofill/compare/v1.0.0-canary.6...v1.0.0-canary.7) (2026-03-24)
+
+
+### Bug Fixes
+
+* update package lock and include in CI/CD ([1d775cd](https://github.com/algorandfoundation/react-native-passkey-autofill/commit/1d775cdde170a6ef400a1ee8a01fce759ddb1f1e))
+
+# [1.0.0-canary.6](https://github.com/algorandfoundation/react-native-passkey-autofill/compare/v1.0.0-canary.5...v1.0.0-canary.6) (2026-03-24)
+
+
+### Bug Fixes
+
+* include banner for package README ([60a6559](https://github.com/algorandfoundation/react-native-passkey-autofill/commit/60a655932faac6de57daf0f30261f2d03a2c1476))
+
+# [1.0.0-canary.5](https://github.com/algorandfoundation/react-native-passkey-autofill/compare/v1.0.0-canary.4...v1.0.0-canary.5) (2026-03-24)
+
+
+### Features
+
+* **android:** add allowed credentials mapping ([e7134fc](https://github.com/algorandfoundation/react-native-passkey-autofill/commit/e7134fc1e5bf09649155e38010e4ef9728580812))
+* **android:** credential compatibility with system-provided clientDataHash and compact JSON ([428e96f](https://github.com/algorandfoundation/react-native-passkey-autofill/commit/428e96f89b73cd35fdbfaa6669f39da68403e17e))

package/CONTRIBUTING.md

@@ -50,6 +50,16 @@ The project includes an example app in the `example/` directory. You can use it
 
 For more details on how the project is structured, see the [Architecture Guide](./ARCHITECTURE.md).
 
+### Testing
+
+Before submitting a Pull Request, ensure that both JavaScript and Native tests pass:
+
+```bash
+npm run test:all
+```
+
+For more details on the testing strategy, refer to the [Testing section in README.md](./README.md#🧪-testing).
+
 ## Submitting a Pull Request
 
 1. Create a new branch for your feature or bugfix:

package/README.md

@@ -1,6 +1,12 @@
-# 🔑 react-native-passkey-autofill
+# @algorandfoundation/react-native-passkey-autofill
 
-Passkey AutoFill for React Native using DP256.
+<p align="center">
+  <img src="https://raw.githubusercontent.com/algorandfoundation/react-native-passkey-autofill/refs/heads/main/assets/banner.png" width="100%" />
+</p>
+
+<p align="center">
+  Passkey AutoFill for React Native using DP256.
+</p>
 
 # 🚀 Get Started
 
@@ -9,13 +15,36 @@ For bare React Native projects, you must ensure that you have [installed and con
 ### Add the package to your npm dependencies
 
 ```bash
-npm install react-native-passkey-autofill
+npm install @algorandfoundation/react-native-passkey-autofill
 ```
 
 ### Configure for Android
 
 To use this module on Android, you need to configure the AutoFill service in your `AndroidManifest.xml` or via the Expo plugin.
 
+#### Expo Plugin Configuration
+
+If you are using Expo, you can configure the plugin in your `app.json` or `app.config.js`:
+
+```json
+{
+  "expo": {
+    "plugins": [
+      [
+        "@algorandfoundation/react-native-passkey-autofill",
+        {
+          "site": "https://your-fido-server.com",
+          "label": "My Custom Credential Provider"
+        }
+      ]
+    ]
+  }
+}
+```
+
+- `site`: The URL of your FIDO server (default: `https://fido.shore-tech.net`).
+- `label`: The name of the credential provider as it appears in Android settings (default: `My Credential Provider`).
+
 ## Usage
 
 ```typescript
@@ -37,17 +66,74 @@ await ReactNativePasskeyAutofill.configureIntentActions(
 await ReactNativePasskeyAutofill.clearCredentials();
 ```
 
+## Events
+
+You can listen for events emitted by the native module when a passkey is successfully added or authenticated.
+
+```typescript
+import ReactNativePasskeyAutofill from '@algorandfoundation/react-native-passkey-autofill';
+import { useEffect } from 'react';
+
+// ... inside a component or hook
+useEffect(() => {
+  const addedSubscription = ReactNativePasskeyAutofill.addListener('onPasskeyAdded', (event) => {
+    console.log('Passkey added successfully:', event.success);
+  });
+
+  const authSubscription = ReactNativePasskeyAutofill.addListener('onPasskeyAuthenticated', (event) => {
+    console.log('Passkey authenticated successfully:', event.success);
+  });
+
+  return () => {
+    addedSubscription.remove();
+    authSubscription.remove();
+  };
+}, []);
+```
+
+## 🧪 Testing
+
+The project is set up with a comprehensive testing approach covering both JavaScript and Native (Kotlin) sides.
+
+### JavaScript Tests
+Run unit tests for the TypeScript module using Jest:
+```bash
+npm test
+```
+
+### Native Android Tests
+Run unit tests for the Kotlin code using JUnit and Robolectric. These tests are executed via the example app's Gradle wrapper:
+```bash
+npm run test:android
+```
+
+### All Tests
+Run both JS and Native tests:
+```bash
+npm run test:all
+```
+
+### Continuous Integration (CI)
+The project includes a GitHub Actions workflow that automatically runs linting, JS tests, and Native Android tests on every push and pull request to the `main` or `release` branches. You can find the configuration in `.github/workflows/ci.yml`.
+
+### Integration Testing (E2E)
+For full end-to-end testing that covers the bridge between JavaScript and Native, we recommend using [Maestro](https://maestro.mobile.dev/). It provides a clean, YAML-based way to automate UI flows and verify the integration of the Passkey Autofill service with the system UI.
+
+## 📱 Example App
+
+The [example](./example) app demonstrates how to integrate this module with a full wallet implementation.
+
 # 🤝 Contributing
 
 Contributions are very welcome! Please refer to guidelines described in the [contributing guide](./CONTRIBUTING.md).
 
 # 💖 Acknowledgements
 
-This has been the commination of many different efforts and ideas. We would like to thank the following individuals and organizations for their contributions:
+This has been the culmination of many different efforts and ideas. We would like to thank the following individuals and organizations for their contributions:
 
 - [Bruno Martins](https://github.com/bmartins) the architect at [Algorand Foundation](https://github.com/algorandfoundation) for conceptualizing and guiding the project.
 - [HashMapsData2Value](https://github.com/HashMapsData2Value) for his guidance and support in DP256 and XHD and his work on the native autofill libraries.
-- [Will Beaumont](https://github.com/mjbeau) for working though integration within the Pera wallet
+- [Will Beaumont](https://github.com/mjbeau) for working through integration within the Pera wallet
 - [Michael T Chuang](https://github.com/michaeltchuang) for his work in KMP integrations and client libraries.
 
 # 📄 License

package/android/build.gradle

@@ -27,6 +27,7 @@ if (useManagedAndroidSdkVersions) {
     defaultConfig {
       minSdkVersion safeExtGet("minSdkVersion", 24)
       targetSdkVersion safeExtGet("targetSdkVersion", 36)
+      testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner"
     }
   }
 }
@@ -43,6 +44,12 @@ android {
   kotlinOptions {
     freeCompilerArgs += ["-opt-in=kotlin.time.ExperimentalTime", "-opt-in=kotlin.RequiresOptIn"]
   }
+  testOptions {
+    unitTests.includeAndroidResources = true
+  }
+  packagingOptions {
+    pickFirst '**/libc++_shared.so'
+  }
 }
 
 dependencies {
@@ -59,6 +66,17 @@ dependencies {
   implementation fileTree(dir: 'libs', include: ['*.jar'])
   implementation "org.jetbrains.kotlinx:kotlinx-coroutines-android:1.8.0"
   implementation "org.jetbrains.kotlinx:kotlinx-coroutines-core:1.8.0"
+
+  // Testing dependencies
+  testImplementation "junit:junit:4.13.2"
+  testImplementation "org.robolectric:robolectric:4.11.1"
+  testImplementation "io.mockk:mockk:1.13.8"
+  testImplementation "org.jetbrains.kotlinx:kotlinx-coroutines-test:1.8.0"
+
+  androidTestImplementation "androidx.test:runner:1.5.2"
+  androidTestImplementation "androidx.test:rules:1.5.0"
+  androidTestImplementation "androidx.test.ext:junit:1.1.5"
+  androidTestImplementation "androidx.test.espresso:espresso-core:3.5.1"
 }
 
 repositories {

package/android/src/main/AndroidManifest.xml

@@ -5,8 +5,7 @@
             android:name=".service.PasskeyAutofillCredentialProviderService"
             android:enabled="true"
             android:exported="true"
-            android:label="My Credential Provider"
-            android:icon="@mipmap/ic_launcher"
+            android:label="@string/passkey_autofill_label"
             android:permission="android.permission.BIND_CREDENTIAL_PROVIDER_SERVICE"
             tools:targetApi="upside_down_cake">
             <intent-filter>
@@ -16,13 +15,19 @@
                 android:name="android.credentials.provider"
                 android:resource="@xml/provider" />
         </service>
-        <activity android:name=".GetPasskeyActivity" android:exported="true">
+        <activity android:name="co.algorand.passkeyautofill.GetPasskeyActivity" 
+            android:exported="true" 
+            android:launchMode="singleTop"
+            android:theme="@style/Theme.PasskeyAutofill.Dialog">
             <intent-filter>
                 <action android:name="co.algorand.passkeyautofill.GET_PASSKEY"/>
                 <category android:name="android.intent.category.DEFAULT"/>
             </intent-filter>
         </activity>
-        <activity android:name=".CreatePasskeyActivity" android:exported="true">
+        <activity android:name="co.algorand.passkeyautofill.CreatePasskeyActivity" 
+            android:exported="true" 
+            android:launchMode="singleTop"
+            android:theme="@style/Theme.PasskeyAutofill.Dialog">
             <intent-filter>
                 <action android:name="co.algorand.passkeyautofill.CREATE_PASSKEY"/>
                 <category android:name="android.intent.category.DEFAULT"/>

package/android/src/main/java/co/algorand/passkeyautofill/CreatePasskeyActivity.kt

@@ -6,7 +6,12 @@ import android.content.Intent
 import android.os.Build
 import android.os.Bundle
 import android.util.Log
+import android.graphics.Color
+import android.graphics.Typeface
+import android.view.Gravity
 import android.widget.Button
+import android.widget.ImageView
+import android.widget.LinearLayout
 import android.widget.TextView
 import androidx.annotation.RequiresApi
 import androidx.appcompat.app.AppCompatActivity
@@ -31,70 +36,205 @@ class CreatePasskeyActivity : AppCompatActivity() {
         const val TAG = "CreatePasskeyActivity"
     }
 
-    private var origin: String = "unknown-origin"
+    private var origin: String = "unknown-origin" // Derivation origin (rpId or hash)
+    private var displayOrigin: String = "unknown-origin"
     private var userHandle: String = "unknown-user"
     private var userName: String = "User"
     private var userId: String = "unknown-id"
+    private var bundleRequestJson: String? = null
     private var request: ProviderCreateCredentialRequest? = null
 
     override fun onCreate(savedInstanceState: Bundle?) {
         super.onCreate(savedInstanceState)
         
         request = PendingIntentHandler.retrieveProviderCreateCredentialRequest(intent)
+        val credentialData = intent.getBundleExtra("CREDENTIAL_DATA")
+        
+        if (credentialData != null) {
+            bundleRequestJson = credentialData.getString("requestJson")
+        }
+
         if (request != null) {
             try {
+                val systemOrigin = credentialRepository.getOrigin(request!!.callingAppInfo)
+                origin = systemOrigin
+                displayOrigin = systemOrigin
+
                 val publicKeyRequest = request!!.callingRequest as CreatePublicKeyCredentialRequest
-                val requestJson = JSONObject(publicKeyRequest.requestJson)
+                val rawJson = bundleRequestJson ?: publicKeyRequest.requestJson
+                val requestJson = JSONObject(rawJson)
+                val pkJson = if (requestJson.has("publicKey")) requestJson.getJSONObject("publicKey") else requestJson
                 
                 // Use RP ID as origin for derivation if available, otherwise fallback to app signature
-                val rpId = requestJson.optJSONObject("rp")?.optString("id")
-                origin = rpId ?: credentialRepository.getOrigin(request!!.callingAppInfo)
+                val rpId = pkJson.optJSONObject("rp")?.optString("id")
+                if (rpId != null && rpId.isNotEmpty()) {
+                    origin = rpId
+                    displayOrigin = rpId
+                }
                 
-                val userJson = requestJson.optJSONObject("user")
-                userHandle = userJson?.optString("name") ?: "unknown-user"
-                userName = userJson?.optString("displayName") ?: userHandle
-                userId = userJson?.optString("id") ?: "unknown-id"
+                userHandle = pkJson.optJSONObject("user")?.optString("name") ?: "unknown-user"
+                userName = pkJson.optJSONObject("user")?.optString("displayName") ?: userHandle
+                userId = pkJson.optJSONObject("user")?.optString("id") ?: "unknown-id"
             } catch (e: Exception) {
                 Log.e(TAG, "Error parsing request", e)
             }
         }
 
-        // Simple UI for demonstration
-        val layout = android.widget.LinearLayout(this).apply {
-            orientation = android.widget.LinearLayout.VERTICAL
-            setPadding(50, 50, 50, 50)
+        // Improved UI
+        val layout = LinearLayout(this).apply {
+            val padding = (32 * resources.displayMetrics.density).toInt()
+            orientation = LinearLayout.VERTICAL
+            setPadding(padding, padding, padding, padding)
+            gravity = Gravity.CENTER_HORIZONTAL
+            setBackgroundColor(Color.WHITE)
         }
         
+        // Header with App Icon and Provider Label
+        try {
+            val appInfo = packageManager.getApplicationInfo(packageName, 0)
+            val appIcon = packageManager.getApplicationIcon(appInfo)
+            val appLabel = packageManager.getApplicationLabel(appInfo)
+
+            val density = resources.displayMetrics.density
+            val iconSize = (48 * density).toInt()
+            val iconMargin = (12 * density).toInt()
+            val headerPadding = (40 * density).toInt()
+
+            val header = LinearLayout(this).apply {
+                orientation = LinearLayout.HORIZONTAL
+                gravity = Gravity.CENTER_VERTICAL
+                setPadding(0, 0, 0, headerPadding)
+            }
+
+            val iconView = ImageView(this).apply {
+                setImageDrawable(appIcon)
+                layoutParams = LinearLayout.LayoutParams(iconSize, iconSize).apply {
+                    marginEnd = iconMargin
+                }
+            }
+            header.addView(iconView)
+
+            val providerLabel = TextView(this).apply {
+                text = appLabel
+                textSize = 16f
+                typeface = Typeface.DEFAULT_BOLD
+                setTextColor(Color.DKGRAY)
+            }
+            header.addView(providerLabel)
+            layout.addView(header)
+        } catch (e: Exception) {
+            // Fallback if app info cannot be loaded
+        }
+
         val title = TextView(this).apply {
-            text = "Create New Passkey"
-            textSize = 24f
-            setPadding(0, 0, 0, 50)
+            text = "Create Passkey"
+            textSize = 28f
+            typeface = Typeface.DEFAULT_BOLD
+            setPadding(0, 0, 0, (8 * resources.displayMetrics.density).toInt())
+            setTextColor(Color.BLACK)
         }
         layout.addView(title)
 
-        val info = TextView(this).apply {
-            text = "For: $userName\nAt: $origin"
-            setPadding(0, 0, 0, 50)
+        val description = TextView(this).apply {
+            text = "Create a new passkey for $displayOrigin"
+            textSize = 16f
+            setPadding(0, 0, 0, (40 * resources.displayMetrics.density).toInt())
+            gravity = Gravity.CENTER_HORIZONTAL
+            setTextColor(Color.GRAY)
         }
-        layout.addView(info)
+        layout.addView(description)
+
+        val userInfoContainer = LinearLayout(this).apply {
+            orientation = LinearLayout.VERTICAL
+            setPadding(0, 0, 0, (50 * resources.displayMetrics.density).toInt())
+            gravity = Gravity.CENTER_HORIZONTAL
+        }
+
+        val userLabel = TextView(this).apply {
+            text = "ACCOUNT"
+            textSize = 12f
+            typeface = Typeface.DEFAULT_BOLD
+            setTextColor(Color.GRAY)
+            setPadding(0, 0, 0, (4 * resources.displayMetrics.density).toInt())
+        }
+        userInfoContainer.addView(userLabel)
+
+        val userValue = TextView(this).apply {
+            text = userName
+            textSize = 20f
+            typeface = Typeface.DEFAULT_BOLD
+            setTextColor(Color.BLACK)
+        }
+        userInfoContainer.addView(userValue)
+        
+        if (userHandle != userName) {
+            val handleValue = TextView(this).apply {
+                text = userHandle
+                textSize = 14f
+                setTextColor(Color.GRAY)
+            }
+            userInfoContainer.addView(handleValue)
+        }
+        layout.addView(userInfoContainer)
         
         val confirmButton = Button(this).apply {
             text = "Create Passkey"
             setOnClickListener {
                 handleCreation()
             }
+            layoutParams = LinearLayout.LayoutParams(
+                LinearLayout.LayoutParams.MATCH_PARENT,
+                LinearLayout.LayoutParams.WRAP_CONTENT
+            ).apply {
+                setMargins(0, 0, 0, (8 * resources.displayMetrics.density).toInt())
+            }
         }
         layout.addView(confirmButton)
 
+        val cancelButton = Button(this, null, android.R.attr.borderlessButtonStyle).apply {
+            text = "Cancel"
+            setOnClickListener {
+                setResult(RESULT_CANCELED)
+                finish()
+            }
+            layoutParams = LinearLayout.LayoutParams(
+                LinearLayout.LayoutParams.MATCH_PARENT,
+                LinearLayout.LayoutParams.WRAP_CONTENT
+            )
+        }
+        layout.addView(cancelButton)
+
         setContentView(layout)
+        
+        // Ensure the activity is focusable and can receive touches
+        layout.isFocusable = true
+        layout.isFocusableInTouchMode = true
+        layout.requestFocus()
     }
 
     @SuppressLint("RestrictedApi")
     private fun handleCreation() {
         try {
             val req = request ?: throw IllegalStateException("No request found")
-            val publicKeyRequest = req.callingRequest as CreatePublicKeyCredentialRequest
-            val requestOptions = PublicKeyCredentialCreationOptions(publicKeyRequest.requestJson)
+            
+            // Prefer using the request JSON from the bundle if available
+            val rawRequestJson = bundleRequestJson ?: run {
+                val publicKeyRequest = req.callingRequest as CreatePublicKeyCredentialRequest
+                publicKeyRequest.requestJson
+            }
+
+            val requestJson = JSONObject(rawRequestJson)
+            val passkeyReqJson = if (requestJson.has("publicKey")) {
+                requestJson.getJSONObject("publicKey").toString()
+            } else {
+                rawRequestJson
+            }
+            val requestOptions = try {
+                PublicKeyCredentialCreationOptions(passkeyReqJson)
+            } catch (e: org.json.JSONException) {
+                Log.e(TAG, "Invalid passkey creation request JSON: $passkeyReqJson")
+                throw e
+            }
 
             val keyPair: KeyPair = credentialRepository.createDeterministicKeyPair(this, origin, userHandle)
             val credentialId = credentialRepository.generateCredentialId(keyPair)
@@ -131,25 +271,34 @@ class CreatePasskeyActivity : AppCompatActivity() {
             )
 
             val resultIntent = Intent()
-            val responseJson = JSONObject(fidoCredential.json())
-            val passkeyDetails = JSONObject()
-            
-            val ecPubKey = keyPair.public as java.security.interfaces.ECPublicKey
-            val ecPrivKey = keyPair.private as java.security.interfaces.ECPrivateKey
-            
-            fun to32(bi: java.math.BigInteger): ByteArray {
-                var ba = bi.toByteArray()
-                if (ba.size < 32) {
-                    ba = ByteArray(32 - ba.size) + ba
+            val fullJson = JSONObject(fidoCredential.json())
+            val respJson = fullJson.getJSONObject("response")
+
+            // Ensure compact clientDataJSON for registration too
+            val sanitizedOrigin = credentialRepository.getOrigin(req.callingAppInfo).replace(Regex("/$"), "")
+            val challenge = if (requestJson.has("publicKey")) {
+                requestJson.getJSONObject("publicKey").getString("challenge")
+            } else {
+                requestJson.getString("challenge")
+            }
+
+            val clientDataJSONString = if (sanitizedOrigin.startsWith("https://") || sanitizedOrigin.startsWith("http://")) {
+                "{\"type\":\"webauthn.create\",\"challenge\":\"$challenge\",\"origin\":\"$sanitizedOrigin\",\"crossOrigin\":false}"
+            } else {
+                val json = JSONObject()
+                json.put("type", "webauthn.create")
+                json.put("challenge", challenge)
+                json.put("origin", sanitizedOrigin)
+                json.put("crossOrigin", false)
+                if (sanitizedOrigin.startsWith("android:apk-key-hash:")) {
+                    json.put("androidPackageName", req.callingAppInfo.packageName)
                 }
-                return ba.copyOfRange(ba.size - 32, ba.size)
+                json.toString()
             }
-            
-            val x = to32(ecPubKey.w.affineX)
-            val y = to32(ecPubKey.w.affineY)
-            val s = to32(ecPrivKey.s)
+            val clientDataJSONb64 = AndroidBase64.encodeToString(clientDataJSONString.toByteArray(), AndroidBase64.URL_SAFE or AndroidBase64.NO_WRAP or AndroidBase64.NO_PADDING)
+            respJson.put("clientDataJSON", clientDataJSONb64)
 
-            val createResponse = CreatePublicKeyCredentialResponse(responseJson.toString())
+            val createResponse = CreatePublicKeyCredentialResponse(fullJson.toString())
             
             PendingIntentHandler.setCreateCredentialResponse(
                 resultIntent,
@@ -157,6 +306,9 @@ class CreatePasskeyActivity : AppCompatActivity() {
             )
             
             setResult(Activity.RESULT_OK, resultIntent)
+            ReactNativePasskeyAutofillModule.instance?.sendEvent("onPasskeyAdded", Bundle().apply {
+                putBoolean("success", true)
+            })
         } catch (e: Exception) {
             Log.e(TAG, "Error during passkey creation", e)
             setResult(Activity.RESULT_CANCELED)