@capawesome/capacitor-live-update 6.0.7 → 6.1.0

package/README.md

@@ -12,6 +12,8 @@ Capacitor plugin to update your app remotely in real-time.
 - 🔄 **Auto Update**: Automatically download and set the latest bundle for the app.
 - 🛟 **Rollback**: Reset the app to the default bundle if an incompatible bundle has been set.
 - 🚀 **Rollout**: Gradually roll out new bundles to gather valuable feedback.
+- 🔒 **Security**: Verify the authenticity and integrity of the bundle using a public key.
+- 🌐 **Open Source**: Licensed under the MIT License.
 
 ## Installation
 
@@ -68,6 +70,7 @@ We recommend to declare [`CA92.1`](https://developer.apple.com/documentation/bun
 | **`appId`**             | <code>string</code>  | The app ID is used to identify the app when using [Capawesome Cloud](https://capawesome.io/cloud).                                                |                    | 5.0.0 |
 | **`autoDeleteBundles`** | <code>boolean</code> | Whether or not to automatically delete unused bundles. When enabled, the plugin will automatically delete unused bundles after calling `ready()`. | <code>false</code> | 5.0.0 |
 | **`enabled`**           | <code>boolean</code> | Whether or not the plugin is enabled.                                                                                                             | <code>true</code>  | 5.0.0 |
+| **`publicKey`**         | <code>string</code>  | The public key to verify the integrity of the bundle. The public key must be a PEM-encoded RSA public key.                                        |                    | 6.1.0 |
 | **`readyTimeout`**      | <code>number</code>  | The timeout in milliseconds to wait for the app to be ready before resetting to the default bundle.                                               | <code>10000</code> | 5.0.0 |
 | **`resetOnUpdate`**     | <code>boolean</code> | Whether or not the app should be reset to the default bundle during an update.                                                                    | <code>true</code>  | 5.0.0 |
 
@@ -82,6 +85,7 @@ In `capacitor.config.json`:
       "appId": '4100e356-e851-47fe-9d3c-b411eb325a99',
       "autoDeleteBundles": undefined,
       "enabled": undefined,
+      "publicKey": '-----BEGIN PUBLIC KEY-----MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDodf1SD0OOn6hIlDuKBza0Ed0OqtwyVJwiyjmE9BJaZ7y8ZUfcF+SKmd0l2cDPM45XIg2tAFux5n29uoKyHwSt+6tCi5CJA5Z1/1eZruRRqABLonV77KS3HUtvOgqRLDnKSV89dYZkM++NwmzOPgIF422mvc+VukcVOBfc8/AHQIDAQAB-----END PUBLIC KEY-----',
       "readyTimeout": undefined,
       "resetOnUpdate": undefined
     }
@@ -102,6 +106,7 @@ const config: CapacitorConfig = {
       appId: '4100e356-e851-47fe-9d3c-b411eb325a99',
       autoDeleteBundles: undefined,
       enabled: undefined,
+      publicKey: '-----BEGIN PUBLIC KEY-----MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDodf1SD0OOn6hIlDuKBza0Ed0OqtwyVJwiyjmE9BJaZ7y8ZUfcF+SKmd0l2cDPM45XIg2tAFux5n29uoKyHwSt+6tCi5CJA5Z1/1eZruRRqABLonV77KS3HUtvOgqRLDnKSV89dYZkM++NwmzOPgIF422mvc+VukcVOBfc8/AHQIDAQAB-----END PUBLIC KEY-----',
       readyTimeout: undefined,
       resetOnUpdate: undefined,
     },
@@ -398,6 +403,9 @@ ready() => Promise<void>
 
 Notify the plugin that the app is ready to use and no rollback is needed.
 
+**Attention**: This method should be called as soon as the app is ready to use
+to prevent the app from being reset to the default bundle.
+
 Only available on Android and iOS.
 
 **Since:** 5.0.0
@@ -527,10 +535,11 @@ Only available on Android and iOS.
 
 #### DownloadBundleOptions
 
-| Prop           | Type                | Description                                                                                               | Since |
-| -------------- | ------------------- | --------------------------------------------------------------------------------------------------------- | ----- |
-| **`url`**      | <code>string</code> | The URL of the bundle to download. The bundle must be a ZIP file containing at least a `index.html` file. | 5.0.0 |
-| **`bundleId`** | <code>string</code> | The unique identifier of the bundle.                                                                      | 5.0.0 |
+| Prop           | Type                | Description                                                                                                       | Since |
+| -------------- | ------------------- | ----------------------------------------------------------------------------------------------------------------- | ----- |
+| **`bundleId`** | <code>string</code> | The unique identifier of the bundle.                                                                              | 5.0.0 |
+| **`checksum`** | <code>string</code> | The checksum of the bundle to verify the integrity of the ZIP file. Must be a SHA-256 hash in hexadecimal format. | 6.1.0 |
+| **`url`**      | <code>string</code> | The URL of the bundle to download. The bundle must be a ZIP file containing at least a `index.html` file.         | 5.0.0 |
 
 
 #### GetBundleResult
@@ -627,7 +636,7 @@ If you want to disable the plugin to test other parts of your app, you can set t
 
 Live updates are only supported for [binary-compatible changes](https://capawesome.io/cloud/live-updates/faq/#what-are-binary-compatible-changes) (e.g. HTML, CSS, JavaScript).
 If you change native code, such as adding a new plugin, you need to resubmit your app to the app stores.
-For this reason, you must be careful to limit live updates to compatible native versions of your app.
+For this reason, you must be careful to [restrict live updates to compatible native versions](https://capawesome.io/blog/how-to-restrict-capacitor-live-updates-to-native-versions/) of your app.
 
 ## Changelog
 

package/android/src/main/java/io/capawesome/capacitorjs/plugins/liveupdate/LiveUpdate.java

@@ -6,6 +6,7 @@ import android.content.pm.PackageInfo;
 import android.content.pm.PackageManager;
 import android.os.Build;
 import android.os.Handler;
+import android.util.Base64;
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
 import com.getcapacitor.Logger;
@@ -29,6 +30,11 @@ import io.capawesome.capacitorjs.plugins.liveupdate.interfaces.NonEmptyCallback;
 import io.capawesome.capacitorjs.plugins.liveupdate.interfaces.Result;
 import java.io.File;
 import java.io.IOException;
+import java.security.KeyFactory;
+import java.security.MessageDigest;
+import java.security.PublicKey;
+import java.security.Signature;
+import java.security.spec.X509EncodedKeySpec;
 import java.util.Arrays;
 import java.util.UUID;
 import net.lingala.zip4j.ZipFile;
@@ -97,6 +103,7 @@ public class LiveUpdate {
 
     public void downloadBundle(@NonNull DownloadBundleOptions options, @NonNull EmptyCallback callback) throws Exception {
         String bundleId = options.getBundleId();
+        String checksum = options.getChecksum();
         String url = options.getUrl();
 
         // Check if the bundle already exists
@@ -107,7 +114,7 @@ public class LiveUpdate {
         }
 
         // Download the bundle
-        downloadBundle(bundleId, url, callback);
+        downloadBundle(bundleId, checksum, null, url, callback);
     }
 
     public void getBundle(@NonNull NonEmptyCallback callback) {
@@ -164,9 +171,7 @@ public class LiveUpdate {
     }
 
     public void reload() {
-        String currentPath = getCurrentCapacitorServerPath();
-        String nextPath = getNextCapacitorServerPath();
-        String path = nextPath == null ? currentPath : nextPath;
+        String path = getNextCapacitorServerPath();
         setCurrentCapacitorServerPath(path);
         startRollbackTimer();
     }
@@ -217,6 +222,8 @@ public class LiveUpdate {
                 @Override
                 public void success(@NonNull GetLatestBundleResponse result) {
                     String latestBundleId = result.getBundleId();
+                    String checksum = result.getChecksum();
+                    String signature = result.getSignature();
                     String url = result.getUrl();
 
                     // Check if the bundle already exists
@@ -235,6 +242,8 @@ public class LiveUpdate {
                     // Download and unzip the bundle
                     downloadBundle(
                         latestBundleId,
+                        checksum,
+                        signature,
                         url,
                         new EmptyCallback() {
                             @Override
@@ -292,6 +301,31 @@ public class LiveUpdate {
         return new File(plugin.getContext().getFilesDir(), bundlesDirectory + "/" + bundle);
     }
 
+    private byte[] getChecksumForFileAsBytes(@NonNull File file) throws Exception {
+        try {
+            MessageDigest digest = MessageDigest.getInstance("SHA-256");
+            BufferedSource source = Okio.buffer(Okio.source(file));
+            Buffer buffer = new Buffer();
+            for (long bytesRead; (bytesRead = source.read(buffer, 2048)) != -1;) {
+                digest.update(buffer.readByteArray());
+            }
+            source.close();
+            return digest.digest();
+        } catch (IOException exception) {
+            Logger.error(LiveUpdatePlugin.TAG, exception.getMessage(), exception);
+            throw new Exception(LiveUpdatePlugin.ERROR_CHECKSUM_CALCULATION_FAILED);
+        }
+    }
+
+    private String getChecksumForFileAsString(@NonNull File file) throws Exception {
+        byte[] checksumBytes = getChecksumForFileAsBytes(file);
+        StringBuilder checksum = new StringBuilder();
+        for (byte checksumByte : checksumBytes) {
+            checksum.append(Integer.toString((checksumByte & 0xff) + 0x100, 16).substring(1));
+        }
+        return checksum.toString();
+    }
+
     private void createBundlesDirectory() {
         File bundlesDirectory = buildBundlesDirectory();
         if (!bundlesDirectory.exists()) {
@@ -299,6 +333,19 @@ public class LiveUpdate {
         }
     }
 
+    private PublicKey createPublicKeyFromString(@NonNull String value) throws Exception {
+        try {
+            value = value.replace("-----BEGIN PUBLIC KEY-----", "").replace("-----END PUBLIC KEY-----", "").replace("\n", "");
+            byte[] byteKey = Base64.decode(value, Base64.DEFAULT);
+            X509EncodedKeySpec X509publicKey = new X509EncodedKeySpec(byteKey);
+            KeyFactory keyFactory = KeyFactory.getInstance("RSA");
+            return keyFactory.generatePublic(X509publicKey);
+        } catch (Exception exception) {
+            Logger.error(LiveUpdatePlugin.TAG, exception.getMessage(), exception);
+            throw new Exception(LiveUpdatePlugin.ERROR_PUBLIC_KEY_INVALID);
+        }
+    }
+
     private void deleteBundle(@NonNull String bundleId) {
         File bundleDirectory = buildBundleDirectoryFor(bundleId);
         deleteFileRecursively(bundleDirectory);
@@ -322,7 +369,13 @@ public class LiveUpdate {
         }
     }
 
-    private void downloadBundle(@NonNull String bundleId, @NonNull String url, @NonNull EmptyCallback callback) {
+    private void downloadBundle(
+        @NonNull String bundleId,
+        @Nullable String expectedChecksum,
+        @Nullable String signature,
+        @NonNull String url,
+        @NonNull EmptyCallback callback
+    ) {
         downloadFile(
             url,
             new NonEmptyCallback<File>() {
@@ -334,6 +387,28 @@ public class LiveUpdate {
                 @Override
                 public void success(@NonNull File result) {
                     try {
+                        // Verify the signature
+                        String publicKey = config.getPublicKey();
+                        if (publicKey != null) {
+                            if (signature == null) {
+                                throw new Exception(LiveUpdatePlugin.ERROR_SIGNATURE_MISSING);
+                            }
+                            PublicKey key = createPublicKeyFromString(publicKey);
+                            // Verify the signature
+                            boolean verified = verifySignatureForFile(result, signature, key);
+                            if (!verified) {
+                                throw new Exception(LiveUpdatePlugin.ERROR_SIGNATURE_VERIFICATION_FAILED);
+                            }
+                        }
+                        // Verify the checksum
+                        else if (expectedChecksum != null) {
+                            // Calculate the checksum
+                            String receivedChecksum = getChecksumForFileAsString(result);
+                            if (!expectedChecksum.equals(receivedChecksum)) {
+                                throw new Exception(LiveUpdatePlugin.ERROR_CHECKSUM_MISMATCH);
+                            }
+                        }
+
                         // Add the bundle
                         addBundle(bundleId, result);
 
@@ -415,6 +490,7 @@ public class LiveUpdate {
             .addQueryParameter("platform", "0")
             .addQueryParameter("pluginVersion", LiveUpdatePlugin.VERSION)
             .build();
+        Logger.debug(LiveUpdatePlugin.TAG, "Fetching latest bundle from " + url);
         OkHttpClient client = new OkHttpClient();
         okhttp3.Request request = new okhttp3.Request.Builder().url(url).build();
         client
@@ -423,6 +499,7 @@ public class LiveUpdate {
                 new okhttp3.Callback() {
                     @Override
                     public void onFailure(@NonNull okhttp3.Call call, @NonNull IOException exception) {
+                        Logger.error(LiveUpdatePlugin.TAG, exception.getMessage(), exception);
                         callback.error(exception);
                     }
 
@@ -472,6 +549,9 @@ public class LiveUpdate {
         return bundleIds;
     }
 
+    /**
+     * @return The current bundle ID (`public` for the built-in bundle).
+     */
     private String getCurrentBundleId() {
         String currentPath = getCurrentCapacitorServerPath();
         if (currentPath.equals(defaultWebAssetDir)) {
@@ -480,6 +560,9 @@ public class LiveUpdate {
         return new File(currentPath).getName();
     }
 
+    /**
+     * @return The absolute path to the current bundle directory (`public` for the built-in bundle).
+     */
     private String getCurrentCapacitorServerPath() {
         return plugin.getBridge().getServerBasePath();
     }
@@ -494,23 +577,27 @@ public class LiveUpdate {
         return deviceId;
     }
 
+    /**
+     * @return The next bundle ID (`public` for the built-in bundle).
+     */
+    @NonNull
     private String getNextBundleId() {
         String nextPath = getNextCapacitorServerPath();
-        if (nextPath == null) {
-            return null;
-        }
         if (nextPath.equals(defaultWebAssetDir)) {
             return defaultWebAssetDir;
         }
         return new File(nextPath).getName();
     }
 
-    @Nullable
+    /**
+     * @return The absolute path to the next bundle directory (`public` for the built-in bundle).
+     */
+    @NonNull
     private String getNextCapacitorServerPath() {
         return plugin
             .getContext()
             .getSharedPreferences(WebView.WEBVIEW_PREFS_NAME, Activity.MODE_PRIVATE)
-            .getString(WebView.CAP_SERVER_PATH, null);
+            .getString(WebView.CAP_SERVER_PATH, defaultWebAssetDir);
     }
 
     private boolean hasBundle(@NonNull String bundleId) {
@@ -607,6 +694,24 @@ public class LiveUpdate {
         return destination;
     }
 
+    private boolean verifySignatureForFile(@NonNull File file, @NonNull String signature, @NonNull PublicKey key) throws Exception {
+        try {
+            byte[] signatureBytes = Base64.decode(signature, Base64.DEFAULT);
+            Signature sig = Signature.getInstance("SHA256withRSA");
+            sig.initVerify(key);
+            BufferedSource source = Okio.buffer(Okio.source(file));
+            Buffer buffer = new Buffer();
+            for (long bytesRead; (bytesRead = source.read(buffer, 2048)) != -1;) {
+                sig.update(buffer.readByteArray());
+            }
+            source.close();
+            return sig.verify(signatureBytes);
+        } catch (Exception exception) {
+            Logger.error(LiveUpdatePlugin.TAG, exception.getMessage(), exception);
+            throw new Exception(LiveUpdatePlugin.ERROR_SIGNATURE_VERIFICATION_FAILED);
+        }
+    }
+
     private boolean wasUpdated() throws PackageManager.NameNotFoundException {
         int lastVersionCode = preferences.getLastVersionCode();
         int currentVersionCode = getPackageInfo().versionCode;

package/android/src/main/java/io/capawesome/capacitorjs/plugins/liveupdate/LiveUpdateConfig.java

@@ -1,6 +1,7 @@
 package io.capawesome.capacitorjs.plugins.liveupdate;
 
 import androidx.annotation.Nullable;
+import java.security.Key;
 
 public class LiveUpdateConfig {
 
@@ -9,6 +10,10 @@ public class LiveUpdateConfig {
 
     private boolean autoDeleteBundles = false;
     private boolean enabled = true;
+
+    @Nullable
+    private String publicKey = null;
+
     private int readyTimeout = 10000;
     private boolean resetOnUpdate = true;
 
@@ -25,6 +30,11 @@ public class LiveUpdateConfig {
         return enabled;
     }
 
+    @Nullable
+    public String getPublicKey() {
+        return publicKey;
+    }
+
     public int getReadyTimeout() {
         return readyTimeout;
     }
@@ -45,6 +55,10 @@ public class LiveUpdateConfig {
         this.enabled = enabled;
     }
 
+    public void setPublicKey(@Nullable String publicKey) {
+        this.publicKey = publicKey;
+    }
+
     public void setReadyTimeout(int readyTimeout) {
         this.readyTimeout = readyTimeout;
     }

package/android/src/main/java/io/capawesome/capacitorjs/plugins/liveupdate/LiveUpdatePlugin.java

@@ -19,16 +19,21 @@ import io.capawesome.capacitorjs.plugins.liveupdate.interfaces.Result;
 public class LiveUpdatePlugin extends Plugin {
 
     public static final String TAG = "LiveUpdate";
-    public static final String VERSION = "6.0.7";
+    public static final String VERSION = "6.1.0";
     public static final String SHARED_PREFERENCES_NAME = "CapawesomeLiveUpdate"; // DO NOT CHANGE
     public static final String ERROR_APP_ID_MISSING = "appId must be configured.";
     public static final String ERROR_BUNDLE_EXISTS = "bundle already exists.";
     public static final String ERROR_BUNDLE_ID_MISSING = "bundleId must be provided.";
     public static final String ERROR_BUNDLE_INDEX_HTML_MISSING = "The bundle does not contain an index.html file.";
     public static final String ERROR_BUNDLE_NOT_FOUND = "bundle not found.";
+    public static final String ERROR_CHECKSUM_CALCULATION_FAILED = "Failed to calculate checksum.";
+    public static final String ERROR_CHECKSUM_MISMATCH = "Checksum mismatch.";
     public static final String ERROR_CUSTOM_ID_MISSING = "customId must be provided.";
     public static final String ERROR_DOWNLOAD_FAILED = "Bundle could not be downloaded.";
     public static final String ERROR_URL_MISSING = "url must be provided.";
+    public static final String ERROR_SIGNATURE_VERIFICATION_FAILED = "Signature verification failed.";
+    public static final String ERROR_PUBLIC_KEY_INVALID = "Invalid public key.";
+    public static final String ERROR_SIGNATURE_MISSING = "Bundle does not contain a signature.";
 
     @Nullable
     private LiveUpdateConfig config;
@@ -78,18 +83,19 @@ public class LiveUpdatePlugin extends Plugin {
     @PluginMethod
     public void downloadBundle(PluginCall call) {
         try {
-            String url = call.getString("url");
-            if (url == null) {
-                call.reject(ERROR_URL_MISSING);
-                return;
-            }
             String bundleId = call.getString("bundleId");
             if (bundleId == null) {
                 call.reject(ERROR_BUNDLE_ID_MISSING);
                 return;
             }
+            String checksum = call.getString("checksum");
+            String url = call.getString("url");
+            if (url == null) {
+                call.reject(ERROR_URL_MISSING);
+                return;
+            }
 
-            DownloadBundleOptions options = new DownloadBundleOptions(bundleId, url);
+            DownloadBundleOptions options = new DownloadBundleOptions(bundleId, checksum, url);
             EmptyCallback callback = new EmptyCallback() {
                 @Override
                 public void success() {
@@ -427,6 +433,8 @@ public class LiveUpdatePlugin extends Plugin {
         config.setAutoDeleteBundles(autoDeleteBundles);
         boolean enabled = getConfig().getBoolean("enabled", config.getEnabled());
         config.setEnabled(enabled);
+        String publicKey = getConfig().getString("publicKey", config.getPublicKey());
+        config.setPublicKey(publicKey);
         int readyTimeout = getConfig().getInt("readyTimeout", config.getReadyTimeout());
         config.setReadyTimeout(readyTimeout);
         boolean resetOnUpdate = getConfig().getBoolean("resetOnUpdate", config.getResetOnUpdate());

package/android/src/main/java/io/capawesome/capacitorjs/plugins/liveupdate/classes/api/GetLatestBundleResponse.java

@@ -6,10 +6,29 @@ import org.json.JSONObject;
 public class GetLatestBundleResponse {
 
     private String bundleId;
+
+    @Nullable
+    private String checksum;
+
+    @Nullable
+    private String signature;
+
     private String url;
 
     public GetLatestBundleResponse(JSONObject responseJson) {
         this.bundleId = responseJson.optString("bundleId");
+        String checksum = responseJson.optString("checksum", "null");
+        if (checksum.equals("null")) {
+            this.checksum = null;
+        } else {
+            this.checksum = checksum;
+        }
+        String signature = responseJson.optString("signature", "null");
+        if (signature.equals("null")) {
+            this.signature = null;
+        } else {
+            this.signature = signature;
+        }
         this.url = responseJson.optString("url");
     }
 
@@ -17,6 +36,16 @@ public class GetLatestBundleResponse {
         return bundleId;
     }
 
+    @Nullable
+    public String getChecksum() {
+        return checksum;
+    }
+
+    @Nullable
+    public String getSignature() {
+        return signature;
+    }
+
     public String getUrl() {
         return url;
     }

package/android/src/main/java/io/capawesome/capacitorjs/plugins/liveupdate/classes/options/DownloadBundleOptions.java

@@ -1,17 +1,22 @@
 package io.capawesome.capacitorjs.plugins.liveupdate.classes.options;
 
 import androidx.annotation.NonNull;
+import androidx.annotation.Nullable;
 
 public class DownloadBundleOptions {
 
     @NonNull
     private String bundleId;
 
+    @Nullable
+    private String checksum;
+
     @NonNull
     private String url;
 
-    public DownloadBundleOptions(@NonNull String bundleId, @NonNull String url) {
+    public DownloadBundleOptions(@NonNull String bundleId, @Nullable String checksum, @NonNull String url) {
         this.bundleId = bundleId;
+        this.checksum = checksum;
         this.url = url;
     }
 
@@ -20,6 +25,11 @@ public class DownloadBundleOptions {
         return bundleId;
     }
 
+    @Nullable
+    public String getChecksum() {
+        return checksum;
+    }
+
     @NonNull
     public String getUrl() {
         return url;

package/dist/docs.json

@@ -181,7 +181,7 @@
             "text": "5.0.0"
           }
         ],
-        "docs": "Notify the plugin that the app is ready to use and no rollback is needed.\n\nOnly available on Android and iOS.",
+        "docs": "Notify the plugin that the app is ready to use and no rollback is needed.\n\n**Attention**: This method should be called as soon as the app is ready to use\nto prevent the app from being reset to the default bundle.\n\nOnly available on Android and iOS.",
         "complexTypes": [],
         "slug": "ready"
       },
@@ -343,34 +343,50 @@
       "methods": [],
       "properties": [
         {
-          "name": "url",
+          "name": "bundleId",
           "tags": [
             {
               "text": "5.0.0",
               "name": "since"
             },
             {
-              "text": "'https://example.com/bundle.zip'",
+              "text": "'1.0.0'",
               "name": "example"
             }
           ],
-          "docs": "The URL of the bundle to download.\n\nThe bundle must be a ZIP file containing at least a `index.html` file.",
+          "docs": "The unique identifier of the bundle.",
           "complexTypes": [],
           "type": "string"
         },
         {
-          "name": "bundleId",
+          "name": "checksum",
+          "tags": [
+            {
+              "text": "6.1.0",
+              "name": "since"
+            },
+            {
+              "text": "'aab8e0a312e807c8eaeb923e2bdccd7731c5508869c62ad8e6e43ee881414c84'",
+              "name": "example"
+            }
+          ],
+          "docs": "The checksum of the bundle to verify the integrity of the ZIP file.\n\nMust be a SHA-256 hash in hexadecimal format.",
+          "complexTypes": [],
+          "type": "string | undefined"
+        },
+        {
+          "name": "url",
           "tags": [
             {
               "text": "5.0.0",
               "name": "since"
             },
             {
-              "text": "'1.0.0'",
+              "text": "'https://example.com/bundle.zip'",
               "name": "example"
             }
           ],
-          "docs": "The unique identifier of the bundle.",
+          "docs": "The URL of the bundle to download.\n\nThe bundle must be a ZIP file containing at least a `index.html` file.",
           "complexTypes": [],
           "type": "string"
         }
@@ -746,6 +762,22 @@
           "complexTypes": [],
           "type": "boolean | undefined"
         },
+        {
+          "name": "publicKey",
+          "tags": [
+            {
+              "text": "6.1.0",
+              "name": "since"
+            },
+            {
+              "text": "'-----BEGIN PUBLIC KEY-----MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDodf1SD0OOn6hIlDuKBza0Ed0OqtwyVJwiyjmE9BJaZ7y8ZUfcF+SKmd0l2cDPM45XIg2tAFux5n29uoKyHwSt+6tCi5CJA5Z1/1eZruRRqABLonV77KS3HUtvOgqRLDnKSV89dYZkM++NwmzOPgIF422mvc+VukcVOBfc8/AHQIDAQAB-----END PUBLIC KEY-----'",
+              "name": "example"
+            }
+          ],
+          "docs": "The public key to verify the integrity of the bundle.\n\nThe public key must be a PEM-encoded RSA public key.",
+          "complexTypes": [],
+          "type": "string | undefined"
+        },
         {
           "name": "readyTimeout",
           "tags": [

package/dist/esm/definitions.d.ts

@@ -24,6 +24,15 @@ declare module '@capacitor/cli' {
              * @default true
              */
             enabled?: boolean;
+            /**
+             * The public key to verify the integrity of the bundle.
+             *
+             * The public key must be a PEM-encoded RSA public key.
+             *
+             * @since 6.1.0
+             * @example '-----BEGIN PUBLIC KEY-----MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDodf1SD0OOn6hIlDuKBza0Ed0OqtwyVJwiyjmE9BJaZ7y8ZUfcF+SKmd0l2cDPM45XIg2tAFux5n29uoKyHwSt+6tCi5CJA5Z1/1eZruRRqABLonV77KS3HUtvOgqRLDnKSV89dYZkM++NwmzOPgIF422mvc+VukcVOBfc8/AHQIDAQAB-----END PUBLIC KEY-----'
+             */
+            publicKey?: string;
             /**
              * The timeout in milliseconds to wait for the app to be ready before resetting to the default bundle.
              *
@@ -117,6 +126,9 @@ export interface LiveUpdatePlugin {
     /**
      * Notify the plugin that the app is ready to use and no rollback is needed.
      *
+     * **Attention**: This method should be called as soon as the app is ready to use
+     * to prevent the app from being reset to the default bundle.
+     *
      * Only available on Android and iOS.
      *
      * @since 5.0.0
@@ -190,6 +202,22 @@ export interface DeleteBundleOptions {
     bundleId: string;
 }
 export interface DownloadBundleOptions {
+    /**
+     * The unique identifier of the bundle.
+     *
+     * @since 5.0.0
+     * @example '1.0.0'
+     */
+    bundleId: string;
+    /**
+     * The checksum of the bundle to verify the integrity of the ZIP file.
+     *
+     * Must be a SHA-256 hash in hexadecimal format.
+     *
+     * @since 6.1.0
+     * @example 'aab8e0a312e807c8eaeb923e2bdccd7731c5508869c62ad8e6e43ee881414c84'
+     */
+    checksum?: string;
     /**
      * The URL of the bundle to download.
      *
@@ -199,13 +227,6 @@ export interface DownloadBundleOptions {
      * @example 'https://example.com/bundle.zip'
      */
     url: string;
-    /**
-     * The unique identifier of the bundle.
-     *
-     * @since 5.0.0
-     * @example '1.0.0'
-     */
-    bundleId: string;
 }
 /**
  * @since 5.0.0

package/dist/esm/definitions.js.map

@@ -1 +1 @@
-{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../src/definitions.ts"],"names":[],"mappings":"AAAA,wCAAwC","sourcesContent":["/// <reference types=\"@capacitor/cli\" />\n\ndeclare module '@capacitor/cli' {\n  export interface PluginsConfig {\n    LiveUpdate?: {\n      /**\n       * The app ID is used to identify the app when using [Capawesome Cloud](https://capawesome.io/cloud).\n       *\n       * @since 5.0.0\n       * @example '4100e356-e851-47fe-9d3c-b411eb325a99'\n       */\n      appId?: string;\n      /**\n       * Whether or not to automatically delete unused bundles.\n       *\n       * When enabled, the plugin will automatically delete unused bundles after calling `ready()`.\n       *\n       * @since 5.0.0\n       * @default false\n       */\n      autoDeleteBundles?: boolean;\n      /**\n       * Whether or not the plugin is enabled.\n       *\n       * @since 5.0.0\n       * @default true\n       */\n      enabled?: boolean;\n      /**\n       * The timeout in milliseconds to wait for the app to be ready before resetting to the default bundle.\n       *\n       * @since 5.0.0\n       * @default 10000\n       */\n      readyTimeout?: number;\n      /**\n       * Whether or not the app should be reset to the default bundle during an update.\n       *\n       * @since 5.0.0\n       * @default true\n       */\n      resetOnUpdate?: boolean;\n    };\n  }\n}\n\nexport interface LiveUpdatePlugin {\n  /**\n   * Delete a bundle from the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  deleteBundle(options: DeleteBundleOptions): Promise<void>;\n  /**\n   * Download a bundle.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  downloadBundle(options: DownloadBundleOptions): Promise<void>;\n  /**\n   * Get the active bundle identifier.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  getBundle(): Promise<GetBundleResult>;\n  /**\n   * Get all available bundle identifiers.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  getBundles(): Promise<GetBundlesResult>;\n  /**\n   * Get the channel of the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  getChannel(): Promise<GetChannelResult>;\n  /**\n   * Get the custom identifier of the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  getCustomId(): Promise<GetCustomIdResult>;\n  /**\n   * Get the device identifier of the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  getDeviceId(): Promise<GetDeviceIdResult>;\n  /**\n   * Get the version code of the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  getVersionCode(): Promise<GetVersionCodeResult>;\n  /**\n   * Get the version name of the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  getVersionName(): Promise<GetVersionNameResult>;\n  /**\n   * Notify the plugin that the app is ready to use and no rollback is needed.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  ready(): Promise<void>;\n  /**\n   * Reload the app to apply the new bundle.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  reload(): Promise<void>;\n  /**\n   * Reset the app to the default bundle.\n   *\n   * Call `reload()` or restart the app to apply the changes.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  reset(): Promise<void>;\n  /**\n   * Set the next bundle to use for the app.\n   *\n   * Call `reload()` or restart the app to apply the changes.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  setBundle(options: SetBundleOptions): Promise<void>;\n  /**\n   * Set the channel of the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  setChannel(options: SetChannelOptions): Promise<void>;\n  /**\n   * Set the custom identifier of the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  setCustomId(options: SetCustomIdOptions): Promise<void>;\n  /**\n   * Automatically download and set the latest bundle for the app using the [Capawesome Cloud](https://capawesome.io/cloud/).\n   *\n   * Call `reload()` or restart the app to apply the changes.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  sync(): Promise<SyncResult>;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface DeleteBundleOptions {\n  /**\n   * The unique identifier of the bundle to delete.\n   *\n   * @since 5.0.0\n   * @example '1.0.0'\n   */\n  bundleId: string;\n}\n\nexport interface DownloadBundleOptions {\n  /**\n   * The URL of the bundle to download.\n   *\n   * The bundle must be a ZIP file containing at least a `index.html` file.\n   *\n   * @since 5.0.0\n   * @example 'https://example.com/bundle.zip'\n   */\n  url: string;\n  /**\n   * The unique identifier of the bundle.\n   *\n   * @since 5.0.0\n   * @example '1.0.0'\n   */\n  bundleId: string;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface GetBundleResult {\n  /**\n   * The unique identifier of the active bundle.\n   *\n   * If `null`, the default bundle is being used.\n   *\n   * @since 5.0.0\n   * @example '1.0.0'\n   */\n  bundleId: string | null;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface GetBundlesResult {\n  /**\n   * An array of unique identifiers of all available bundles.\n   *\n   * @since 5.0.0\n   */\n  bundleIds: string[];\n}\n\n/**\n * @since 5.0.0\n */\nexport interface GetChannelResult {\n  /**\n   * The channel of the app.\n   *\n   * If `null`, the app is using the default channel.\n   *\n   * @since 5.0.0\n   * @example 'production'\n   */\n  channel: string | null;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface GetDeviceIdResult {\n  /**\n   * The unique identifier of the device.\n   *\n   * On iOS, [`identifierForVendor`](https://developer.apple.com/documentation/uikit/uidevice/1620059-identifierforvendor) is used.\n   * The value of this property is the same for apps that come from the same vendor running on the same device.\n   *\n   * @since 5.0.0\n   *\n   * @example '50d2a548-80b7-4dad-adc7-97c0e79d8a89'\n   */\n  deviceId: string;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface GetVersionCodeResult {\n  /**\n   * The version code of the app.\n   *\n   * On **Android**, this is the `versionCode` from the `android/app/build.gradle` file.\n   * On **iOS**, this is the `CFBundleVersion` from the `Info.plist` file.\n   *\n   * @since 5.0.0\n   * @example \"1\"\n   */\n  versionCode: string;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface GetVersionNameResult {\n  /**\n   * The version name of the app.\n   *\n   * On **Android**, this is the `versionName` from the `android/app/build.gradle` file.\n   * On **iOS**, this is the `CFBundleShortVersionString` from the `Info.plist` file.\n   *\n   * @since 5.0.0\n   * @example \"1.0.0\"\n   */\n  versionName: string;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface GetCustomIdResult {\n  /**\n   * The custom identifier of the app.\n   *\n   * If `null`, no custom identifier is set.\n   *\n   * @since 5.0.0\n   * @example '50d2a548-80b7-4dad-adc7-97c0e79d8a89'\n   */\n  customId: string | null;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface SetBundleOptions {\n  /**\n   * The unique identifier of the bundle to use.\n   *\n   * @since 5.0.0\n   * @example '1.0.0'\n   */\n  bundleId: string;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface SetChannelOptions {\n  /**\n   * The channel of the app.\n   *\n   * Set `null` to remove the channel.\n   *\n   * @since 5.0.0\n   */\n  channel: string | null;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface SetCustomIdOptions {\n  /**\n   * The custom identifier of the app.\n   *\n   * Set `null` to remove the custom identifier.\n   *\n   * @since 5.0.0\n   */\n  customId: string | null;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface SyncResult {\n  /**\n   * The identifier of the next bundle to use.\n   *\n   * If `null`, the app is up-to-date and no new bundle is available.\n   *\n   * @since 5.0.0\n   */\n  nextBundleId: string | null;\n}\n"]}
+{"version":3,"file":"definitions.js","sourceRoot":"","sources":["../../src/definitions.ts"],"names":[],"mappings":"AAAA,wCAAwC","sourcesContent":["/// <reference types=\"@capacitor/cli\" />\n\ndeclare module '@capacitor/cli' {\n  export interface PluginsConfig {\n    LiveUpdate?: {\n      /**\n       * The app ID is used to identify the app when using [Capawesome Cloud](https://capawesome.io/cloud).\n       *\n       * @since 5.0.0\n       * @example '4100e356-e851-47fe-9d3c-b411eb325a99'\n       */\n      appId?: string;\n      /**\n       * Whether or not to automatically delete unused bundles.\n       *\n       * When enabled, the plugin will automatically delete unused bundles after calling `ready()`.\n       *\n       * @since 5.0.0\n       * @default false\n       */\n      autoDeleteBundles?: boolean;\n      /**\n       * Whether or not the plugin is enabled.\n       *\n       * @since 5.0.0\n       * @default true\n       */\n      enabled?: boolean;\n      /**\n       * The public key to verify the integrity of the bundle.\n       *\n       * The public key must be a PEM-encoded RSA public key.\n       *\n       * @since 6.1.0\n       * @example '-----BEGIN PUBLIC KEY-----MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDodf1SD0OOn6hIlDuKBza0Ed0OqtwyVJwiyjmE9BJaZ7y8ZUfcF+SKmd0l2cDPM45XIg2tAFux5n29uoKyHwSt+6tCi5CJA5Z1/1eZruRRqABLonV77KS3HUtvOgqRLDnKSV89dYZkM++NwmzOPgIF422mvc+VukcVOBfc8/AHQIDAQAB-----END PUBLIC KEY-----'\n       */\n      publicKey?: string;\n      /**\n       * The timeout in milliseconds to wait for the app to be ready before resetting to the default bundle.\n       *\n       * @since 5.0.0\n       * @default 10000\n       */\n      readyTimeout?: number;\n      /**\n       * Whether or not the app should be reset to the default bundle during an update.\n       *\n       * @since 5.0.0\n       * @default true\n       */\n      resetOnUpdate?: boolean;\n    };\n  }\n}\n\nexport interface LiveUpdatePlugin {\n  /**\n   * Delete a bundle from the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  deleteBundle(options: DeleteBundleOptions): Promise<void>;\n  /**\n   * Download a bundle.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  downloadBundle(options: DownloadBundleOptions): Promise<void>;\n  /**\n   * Get the active bundle identifier.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  getBundle(): Promise<GetBundleResult>;\n  /**\n   * Get all available bundle identifiers.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  getBundles(): Promise<GetBundlesResult>;\n  /**\n   * Get the channel of the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  getChannel(): Promise<GetChannelResult>;\n  /**\n   * Get the custom identifier of the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  getCustomId(): Promise<GetCustomIdResult>;\n  /**\n   * Get the device identifier of the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  getDeviceId(): Promise<GetDeviceIdResult>;\n  /**\n   * Get the version code of the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  getVersionCode(): Promise<GetVersionCodeResult>;\n  /**\n   * Get the version name of the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  getVersionName(): Promise<GetVersionNameResult>;\n  /**\n   * Notify the plugin that the app is ready to use and no rollback is needed.\n   *\n   * **Attention**: This method should be called as soon as the app is ready to use\n   * to prevent the app from being reset to the default bundle.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  ready(): Promise<void>;\n  /**\n   * Reload the app to apply the new bundle.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  reload(): Promise<void>;\n  /**\n   * Reset the app to the default bundle.\n   *\n   * Call `reload()` or restart the app to apply the changes.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  reset(): Promise<void>;\n  /**\n   * Set the next bundle to use for the app.\n   *\n   * Call `reload()` or restart the app to apply the changes.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  setBundle(options: SetBundleOptions): Promise<void>;\n  /**\n   * Set the channel of the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  setChannel(options: SetChannelOptions): Promise<void>;\n  /**\n   * Set the custom identifier of the app.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  setCustomId(options: SetCustomIdOptions): Promise<void>;\n  /**\n   * Automatically download and set the latest bundle for the app using the [Capawesome Cloud](https://capawesome.io/cloud/).\n   *\n   * Call `reload()` or restart the app to apply the changes.\n   *\n   * Only available on Android and iOS.\n   *\n   * @since 5.0.0\n   */\n  sync(): Promise<SyncResult>;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface DeleteBundleOptions {\n  /**\n   * The unique identifier of the bundle to delete.\n   *\n   * @since 5.0.0\n   * @example '1.0.0'\n   */\n  bundleId: string;\n}\n\nexport interface DownloadBundleOptions {\n  /**\n   * The unique identifier of the bundle.\n   *\n   * @since 5.0.0\n   * @example '1.0.0'\n   */\n  bundleId: string;\n  /**\n   * The checksum of the bundle to verify the integrity of the ZIP file.\n   *\n   * Must be a SHA-256 hash in hexadecimal format.\n   *\n   * @since 6.1.0\n   * @example 'aab8e0a312e807c8eaeb923e2bdccd7731c5508869c62ad8e6e43ee881414c84'\n   */\n  checksum?: string;\n  /**\n   * The URL of the bundle to download.\n   *\n   * The bundle must be a ZIP file containing at least a `index.html` file.\n   *\n   * @since 5.0.0\n   * @example 'https://example.com/bundle.zip'\n   */\n  url: string;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface GetBundleResult {\n  /**\n   * The unique identifier of the active bundle.\n   *\n   * If `null`, the default bundle is being used.\n   *\n   * @since 5.0.0\n   * @example '1.0.0'\n   */\n  bundleId: string | null;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface GetBundlesResult {\n  /**\n   * An array of unique identifiers of all available bundles.\n   *\n   * @since 5.0.0\n   */\n  bundleIds: string[];\n}\n\n/**\n * @since 5.0.0\n */\nexport interface GetChannelResult {\n  /**\n   * The channel of the app.\n   *\n   * If `null`, the app is using the default channel.\n   *\n   * @since 5.0.0\n   * @example 'production'\n   */\n  channel: string | null;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface GetDeviceIdResult {\n  /**\n   * The unique identifier of the device.\n   *\n   * On iOS, [`identifierForVendor`](https://developer.apple.com/documentation/uikit/uidevice/1620059-identifierforvendor) is used.\n   * The value of this property is the same for apps that come from the same vendor running on the same device.\n   *\n   * @since 5.0.0\n   *\n   * @example '50d2a548-80b7-4dad-adc7-97c0e79d8a89'\n   */\n  deviceId: string;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface GetVersionCodeResult {\n  /**\n   * The version code of the app.\n   *\n   * On **Android**, this is the `versionCode` from the `android/app/build.gradle` file.\n   * On **iOS**, this is the `CFBundleVersion` from the `Info.plist` file.\n   *\n   * @since 5.0.0\n   * @example \"1\"\n   */\n  versionCode: string;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface GetVersionNameResult {\n  /**\n   * The version name of the app.\n   *\n   * On **Android**, this is the `versionName` from the `android/app/build.gradle` file.\n   * On **iOS**, this is the `CFBundleShortVersionString` from the `Info.plist` file.\n   *\n   * @since 5.0.0\n   * @example \"1.0.0\"\n   */\n  versionName: string;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface GetCustomIdResult {\n  /**\n   * The custom identifier of the app.\n   *\n   * If `null`, no custom identifier is set.\n   *\n   * @since 5.0.0\n   * @example '50d2a548-80b7-4dad-adc7-97c0e79d8a89'\n   */\n  customId: string | null;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface SetBundleOptions {\n  /**\n   * The unique identifier of the bundle to use.\n   *\n   * @since 5.0.0\n   * @example '1.0.0'\n   */\n  bundleId: string;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface SetChannelOptions {\n  /**\n   * The channel of the app.\n   *\n   * Set `null` to remove the channel.\n   *\n   * @since 5.0.0\n   */\n  channel: string | null;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface SetCustomIdOptions {\n  /**\n   * The custom identifier of the app.\n   *\n   * Set `null` to remove the custom identifier.\n   *\n   * @since 5.0.0\n   */\n  customId: string | null;\n}\n\n/**\n * @since 5.0.0\n */\nexport interface SyncResult {\n  /**\n   * The identifier of the next bundle to use.\n   *\n   * If `null`, the app is up-to-date and no new bundle is available.\n   *\n   * @since 5.0.0\n   */\n  nextBundleId: string | null;\n}\n"]}

package/ios/Plugin/Classes/CustomError.swift

@@ -7,8 +7,12 @@ public enum CustomError: Error {
     case bundleIndexHtmlMissing
     case bundleNotFound
     case channelMissing
+    case checksumCalculationFailed
+    case checksumMismatch
     case customIdMissing
     case downloadFailed
+    case signatureMissing
+    case signatureVerificationFailed
     case urlMissing
 }
 
@@ -27,10 +31,18 @@ extension CustomError: LocalizedError {
             return NSLocalizedString("bundle not found.", comment: "bundleNotFound")
         case .channelMissing:
             return NSLocalizedString("channel must be provided.", comment: "channelMissing")
+        case .checksumCalculationFailed:
+            return NSLocalizedString("Failed to calculate checksum.", comment: "checksumCalculationFailed")
+        case .checksumMismatch:
+            return NSLocalizedString("Checksum mismatch.", comment: "checksumMismatch")
         case .customIdMissing:
             return NSLocalizedString("customId must be provided.", comment: "customIdMissing")
         case .downloadFailed:
             return NSLocalizedString("Bundle could not be downloaded.", comment: "downloadFailed")
+        case .signatureMissing:
+            return NSLocalizedString("Bundle does not contain a signature.", comment: "signatureMissing")
+        case .signatureVerificationFailed:
+            return NSLocalizedString("Signature verification failed.", comment: "signatureVerificationFailed")
         case .urlMissing:
             return NSLocalizedString("url must be provided.", comment: "urlMissing")
         }

package/ios/Plugin/Classes/Options/DownloadBundleOptions.swift

@@ -3,10 +3,12 @@ import Capacitor
 
 @objc public class DownloadBundleOptions: NSObject {
     private var bundleId: String
+    private var checksum: String?
     private var url: String
 
-    init(bundleId: String, url: String) {
+    init(bundleId: String, checksum: String?, url: String) {
         self.bundleId = bundleId
+        self.checksum = checksum
         self.url = url
     }
 
@@ -14,6 +16,10 @@ import Capacitor
         return bundleId
     }
 
+    func getChecksum() -> String? {
+        return checksum
+    }
+
     func getUrl() -> String {
         return url
     }

package/ios/Plugin/LiveUpdate.swift

@@ -1,7 +1,9 @@
 import Foundation
+import CryptoKit
 import SSZipArchive
 import Capacitor
 import Alamofire
+import CommonCrypto
 
 // swiftlint:disable type_body_length
 @objc public class LiveUpdate: NSObject {
@@ -50,8 +52,9 @@ import Alamofire
     }
 
     @objc public func downloadBundle(_ options: DownloadBundleOptions, completion: @escaping (Error?) -> Void) {
-        let url = options.getUrl()
         let bundleId = options.getBundleId()
+        let checksum = options.getChecksum()
+        let url = options.getUrl()
 
         // Check if the bundle already exists
         if hasBundle(bundleId: bundleId) {
@@ -61,7 +64,7 @@ import Alamofire
         }
 
         // Download the bundle
-        downloadBundle(bundleId: bundleId, url: url, completion: { error in
+        downloadBundle(bundleId: bundleId, checksum: checksum, signature: nil, url: url, completion: { error in
             if let error = error {
                 completion(error)
                 return
@@ -125,17 +128,9 @@ import Alamofire
     }
 
     @objc public func reload() {
-        var path: String?
-        if let currentPath = getCurrentCapacitorServerPath() {
-            path = currentPath
-        }
-        if let nextPath = getNextCapacitorServerPath() {
-            path = nextPath
-        }
-        if let path = path {
-            setCurrentCapacitorServerPath(path: path)
-            startRollbackTimer()
-        }
+        let path = getNextCapacitorServerPath()
+        setCurrentCapacitorServerPath(path: path)
+        startRollbackTimer()
     }
 
     @objc public func reset() {
@@ -195,7 +190,7 @@ import Alamofire
                     completion(result, nil)
                 } else {
                     // Download and unzip the bundle
-                    self.downloadBundle(bundleId: latestBundleId, url: response.url, completion: { error in
+                    self.downloadBundle(bundleId: latestBundleId, checksum: response.checksum, signature: response.signature, url: response.url, completion: { error in
                         if let error = error {
                             completion(nil, error)
                             return
@@ -249,6 +244,20 @@ import Alamofire
         return url.path
     }
 
+    /// - Returns: The sha256 checksum of the file at the given URL.
+    private func getChecksumForFile(url: URL) throws -> String {
+        let handle = try FileHandle(forReadingFrom: url)
+        var hasher = SHA256()
+        while autoreleasepool(invoking: {
+            let nextChunk = handle.readData(ofLength: 2048)
+            guard !nextChunk.isEmpty else { return false }
+            hasher.update(data: nextChunk)
+            return true
+        }) { }
+        let digest = hasher.finalize()
+        return digest.map { String(format: "%02hhx", $0) }.joined()
+    }
+
     private func createBundlesDirectory() {
         let bundlesDirectoryUrl = libraryDirectoryUrl.appendingPathComponent(bundlesDirectory)
         let exists = FileManager.default.fileExists(atPath: bundlesDirectoryUrl.path)
@@ -282,7 +291,7 @@ import Alamofire
         }
     }
 
-    private func downloadBundle(bundleId: String, url: String, completion: @escaping (Error?) -> Void) {
+    private func downloadBundle(bundleId: String, checksum: String?, signature: String?, url: String, completion: @escaping (Error?) -> Void) {
         // Download the bundle
         downloadFile(url: url, completion: { url, error in
             if let error = error {
@@ -290,6 +299,39 @@ import Alamofire
                 return
             }
             if let url = url {
+                // Verify the signature
+                if let publicKey = self.config.publicKey {
+                    guard let signature = signature else {
+                        completion(CustomError.signatureMissing)
+                        return
+                    }
+                    // Verify the signature
+                    do {
+                        let verified = try self.verifySignatureForFile(url: url, signature: signature, publicKey: publicKey)
+                        if !verified {
+                            completion(CustomError.signatureVerificationFailed)
+                            return
+                        }
+                    } catch {
+                        completion(CustomError.signatureVerificationFailed)
+                        return
+                    }
+                }
+                // Verify the checksum
+                else if let expectedChecksum = checksum {
+                    // Calculate the checksum
+                    do {
+                        let receivedChecksum = try self.getChecksumForFile(url: url)
+                        if receivedChecksum != expectedChecksum {
+                            completion(CustomError.checksumMismatch)
+                            return
+                        }
+                    } catch {
+                        completion(CustomError.checksumCalculationFailed)
+                        return
+                    }
+                }
+
                 // Add the bundle
                 self.addBundle(bundleId: bundleId, zipFile: url, completion: { error in
                     // Delete the temporary file
@@ -338,8 +380,12 @@ import Alamofire
         parameters["pluginVersion"] = LiveUpdatePlugin.version
         let url = URL(string: "https://api.cloud.capawesome.io/v1/apps/\(config.appId ?? "")/bundles/latest")!
         AF.request(url, method: .get, parameters: parameters).validate().responseDecodable(of: GetLatestBundleResponse.self) { response in
+            CAPLog.print("[", LiveUpdatePlugin.tag, "] Fetching latest bundle from ", response.request?.url?.absoluteString ?? "")
             if let error = response.error {
                 CAPLog.print("[", LiveUpdatePlugin.tag, "] ", error)
+                if let data = response.data {
+                    CAPLog.print("[", LiveUpdatePlugin.tag, "] ", String(decoding: data, as: UTF8.self))
+                }
                 completion(nil, error)
                 return
             }
@@ -375,6 +421,7 @@ import Alamofire
         }
     }
 
+    /// - Returns: The current bundle ID (`public` for the built-in bundle) or `nil` if no view controller was found.
     private func getCurrentBundleId() -> String? {
         guard let path = getCurrentCapacitorServerPath() else {
             return nil
@@ -382,6 +429,7 @@ import Alamofire
         return URL(fileURLWithPath: path).lastPathComponent
     }
 
+    /// - Returns: The path to the current bundle directory or `nil` if no view controller was found.
     private func getCurrentCapacitorServerPath() -> String? {
         guard let viewController = self.plugin.bridge?.viewController as? CAPBridgeViewController else {
             return nil
@@ -394,18 +442,19 @@ import Alamofire
         return deviceId.lowercased()
     }
 
-    private func getNextBundleId() -> String? {
-        guard let path = getNextCapacitorServerPath() else {
-            return nil
-        }
+    /// - Returns: The next bundle ID (`public` for the built-in bundle).
+    private func getNextBundleId() -> String {
+        let path = getNextCapacitorServerPath()
         return URL(fileURLWithPath: path).lastPathComponent
     }
 
-    private func getNextCapacitorServerPath() -> String? {
+    /// - Returns: The absolute path to the next bundle directory.
+    private func getNextCapacitorServerPath() -> String {
+        let defaultCapacitorServerPath = buildCapacitorServerPathFor(bundleId: defaultWebAssetDir)
         if let path = KeyValueStore.standard[self.defaultServerPathKey, as: String.self] {
-            return path.isEmpty ? nil : path
+            return path.isEmpty ? defaultCapacitorServerPath : path
         }
-        return nil
+        return defaultCapacitorServerPath
     }
 
     private func hasBundle(bundleId: String) -> Bool {
@@ -459,7 +508,7 @@ import Alamofire
 
     private func setNextCapacitorServerPath(path: String) {
         if path.hasSuffix("/public") {
-            // Reset the custom server base path
+            // Must set an empty string to reset the custom server base path
             KeyValueStore.standard[self.defaultServerPathKey] = ""
         } else {
             // Attention: Only the lastPathComponent is used (see https://dub.sh/BLluidt)
@@ -493,6 +542,64 @@ import Alamofire
         })
     }
 
+    private func verifySignatureForFile(url: URL, signature: String, publicKey: String) throws -> Bool {
+        let publicKeyAsBase64 = publicKey
+            .replacingOccurrences(of: "-----BEGIN PUBLIC KEY-----", with: "")
+            .replacingOccurrences(of: "-----END PUBLIC KEY-----", with: "")
+            .replacingOccurrences(of: "\n", with: "")
+        guard let publicKeyData = Data(base64Encoded: publicKeyAsBase64) else {
+            CAPLog.print("[", LiveUpdatePlugin.tag, "] ", "Failed to decode public key.")
+            return false
+        }
+        let publicKeyAttributes: [CFString: Any] = [
+            kSecAttrKeyType: kSecAttrKeyTypeRSA,
+            kSecAttrKeyClass: kSecAttrKeyClassPublic,
+            kSecAttrKeySizeInBits: 2048,
+            kSecReturnPersistentRef: true
+        ]
+        var secKeyCreateWithDataError: Unmanaged<CFError>?
+        guard let publicKey = SecKeyCreateWithData(publicKeyData as CFData, publicKeyAttributes as CFDictionary, &secKeyCreateWithDataError) else {
+            if let error = secKeyCreateWithDataError?.takeRetainedValue() {
+                CAPLog.print("[", LiveUpdatePlugin.tag, "] ", "Failed to create public key with error: \(error)")
+            }
+            return false
+        }
+        guard let signatureData = Data(base64Encoded: signature) else {
+            CAPLog.print("[", LiveUpdatePlugin.tag, "] ", "Failed to decode signature.")
+            return false
+        }
+
+        // Create SHA256 digest
+        var digestContext = CC_SHA256_CTX()
+        CC_SHA256_Init(&digestContext)
+
+        // Update the digest with the file's data
+        let handle = try FileHandle(forReadingFrom: url)
+        while autoreleasepool(invoking: {
+            let nextChunk = handle.readData(ofLength: 2048)
+            guard !nextChunk.isEmpty else { return false }
+            nextChunk.withUnsafeBytes {
+                _ = CC_SHA256_Update(&digestContext, $0.baseAddress, CC_LONG(nextChunk.count))
+            }
+            return true
+        }) { }
+
+        // Compute the digest
+        var digest = Data(count: Int(CC_SHA256_DIGEST_LENGTH))
+        digest.withUnsafeMutableBytes {
+            _ = CC_SHA256_Final($0.bindMemory(to: UInt8.self).baseAddress, &digestContext)
+        }
+
+        // Verify the signature
+        var secKeyVerifySignatureError: Unmanaged<CFError>?
+        let signatureAlgorithm = SecKeyAlgorithm.rsaSignatureDigestPKCS1v15SHA256
+        let verificationResult = SecKeyVerifySignature(publicKey, signatureAlgorithm, digest as CFData, signatureData as CFData, &secKeyVerifySignatureError)
+        if let error = secKeyVerifySignatureError?.takeRetainedValue() {
+            CAPLog.print("[", LiveUpdatePlugin.tag, "] ", "Failed to verify signature with error: \(error)")
+        }
+        return verificationResult
+    }
+
     private func wasUpdated() -> Bool {
         guard let lastBundleVersionString = preferences.getLastBundleVersion() else {
             return false

package/ios/Plugin/LiveUpdateConfig.swift

@@ -2,6 +2,7 @@ public struct LiveUpdateConfig {
     var appId: String?
     var autoDeleteBundles = false
     var enabled = true
+    var publicKey: String?
     var readyTimeout = 10000
     var resetOnUpdate = true
 }

package/ios/Plugin/LiveUpdatePlugin.swift

@@ -8,7 +8,7 @@ import Capacitor
 @objc(LiveUpdatePlugin)
 public class LiveUpdatePlugin: CAPPlugin {
     public static let tag = "LiveUpdate"
-    public static let version = "6.0.7"
+    public static let version = "6.1.0"
     public static let userDefaultsPrefix = "CapawesomeLiveUpdate" // DO NOT CHANGE
 
     private var config: LiveUpdateConfig?
@@ -42,12 +42,13 @@ public class LiveUpdatePlugin: CAPPlugin {
             call.reject(CustomError.bundleIdMissing.localizedDescription)
             return
         }
+        let checksum = call.getString("checksum")
         guard let url = call.getString("url") else {
             call.reject(CustomError.urlMissing.localizedDescription)
             return
         }
 
-        let options = DownloadBundleOptions(bundleId: bundleId, url: url)
+        let options = DownloadBundleOptions(bundleId: bundleId, checksum: checksum, url: url)
 
         implementation?.downloadBundle(options, completion: { error in
             if let error = error {
@@ -239,6 +240,7 @@ public class LiveUpdatePlugin: CAPPlugin {
         config.appId = getConfig().getString("appId", config.appId)
         config.autoDeleteBundles = getConfig().getBoolean("autoDeleteBundles", config.autoDeleteBundles)
         config.enabled = getConfig().getBoolean("enabled", config.enabled)
+        config.publicKey = getConfig().getString("publicKey", config.publicKey)
         config.readyTimeout = getConfig().getInt("readyTimeout", config.readyTimeout)
         config.resetOnUpdate = getConfig().getBoolean("resetOnUpdate", config.resetOnUpdate)
 

package/ios/Plugin/Protocols/Api/GetLatestBundleResponse.swift

@@ -1,4 +1,6 @@
 struct GetLatestBundleResponse: Codable {
     var bundleId: String
+    var checksum: String?
+    var signature: String?
     var url: String
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capawesome/capacitor-live-update",
-  "version": "6.0.7",
+  "version": "6.1.0",
   "description": "Capacitor plugin to update your app remotely in real-time.",
   "main": "dist/plugin.cjs.js",
   "module": "dist/esm/index.js",
@@ -36,7 +36,14 @@
   "keywords": [
     "capacitor",
     "plugin",
-    "native"
+    "native",
+    "ionic",
+    "android",
+    "ios",
+    "live update",
+    "remote update",
+    "ota",
+    "capgo"
   ],
   "scripts": {
     "verify": "npm run verify:ios && npm run verify:android && npm run verify:web",