@capawesome/capacitor-live-update 6.0.8 → 6.2.0-dev.0a2a6a5.1722676620

package/README.md

@@ -7,11 +7,13 @@ Capacitor plugin to update your app remotely in real-time.
 - 🔋 Supports **Android and iOS**
 - ⚡️ **Capacitor 6** support
 - 📦 **Bundle Management**: Download, set, and delete bundles.
-- ☁️ **Cloud Support**: Use the [Capawesome Cloud](https://capawesome.io/cloud) to manage your app updates.
+- ☁️ **Cloud Support**: Use the [Capawesome Cloud](https://capawesome.io/cloud/live-updates/) to manage your app updates.
 - 📺 **Channel Support**: Set a channel for the app to manage different versions.
 - 🔄 **Auto Update**: Automatically download and set the latest bundle for the app.
 - 🛟 **Rollback**: Reset the app to the default bundle if an incompatible bundle has been set.
 - 🚀 **Rollout**: Gradually roll out new bundles to gather valuable feedback.
+- 🔒 **Security**: Verify the authenticity and integrity of the bundle using a public key.
+- 🌐 **Open Source**: Licensed under the MIT License.
 
 ## Installation
 
@@ -63,13 +65,15 @@ We recommend to declare [`CA92.1`](https://developer.apple.com/documentation/bun
 <docgen-config>
 <!--Update the source file JSDoc comments and rerun docgen to update the docs below-->
 
-| Prop                    | Type                 | Description                                                                                                                                       | Default            | Since |
-| ----------------------- | -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------ | ----- |
-| **`appId`**             | <code>string</code>  | The app ID is used to identify the app when using [Capawesome Cloud](https://capawesome.io/cloud).                                                |                    | 5.0.0 |
-| **`autoDeleteBundles`** | <code>boolean</code> | Whether or not to automatically delete unused bundles. When enabled, the plugin will automatically delete unused bundles after calling `ready()`. | <code>false</code> | 5.0.0 |
-| **`enabled`**           | <code>boolean</code> | Whether or not the plugin is enabled.                                                                                                             | <code>true</code>  | 5.0.0 |
-| **`readyTimeout`**      | <code>number</code>  | The timeout in milliseconds to wait for the app to be ready before resetting to the default bundle.                                               | <code>10000</code> | 5.0.0 |
-| **`resetOnUpdate`**     | <code>boolean</code> | Whether or not the app should be reset to the default bundle during an update.                                                                    | <code>true</code>  | 5.0.0 |
+| Prop                    | Type                      | Description                                                                                                                                       | Default            | Since |
+| ----------------------- | ------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------ | ----- |
+| **`appId`**             | <code>string</code>       | The app ID is used to identify the app when using [Capawesome Cloud](https://capawesome.io/cloud).                                                |                    | 5.0.0 |
+| **`autoDeleteBundles`** | <code>boolean</code>      | Whether or not to automatically delete unused bundles. When enabled, the plugin will automatically delete unused bundles after calling `ready()`. | <code>false</code> | 5.0.0 |
+| **`enabled`**           | <code>boolean</code>      | Whether or not the plugin is enabled.                                                                                                             | <code>true</code>  | 5.0.0 |
+| **`location`**          | <code>'us' \| 'eu'</code> | The location of the server to use when using [Capawesome Cloud](https://capawesome.io/cloud).                                                     | <code>'us'</code>  | 6.2.0 |
+| **`publicKey`**         | <code>string</code>       | The public key to verify the integrity of the bundle. The public key must be a PEM-encoded RSA public key.                                        |                    | 6.1.0 |
+| **`readyTimeout`**      | <code>number</code>       | The timeout in milliseconds to wait for the app to be ready before resetting to the default bundle.                                               | <code>10000</code> | 5.0.0 |
+| **`resetOnUpdate`**     | <code>boolean</code>      | Whether or not the app should be reset to the default bundle during an update.                                                                    | <code>true</code>  | 5.0.0 |
 
 ### Examples
 
@@ -82,6 +86,8 @@ In `capacitor.config.json`:
       "appId": '4100e356-e851-47fe-9d3c-b411eb325a99',
       "autoDeleteBundles": undefined,
       "enabled": undefined,
+      "location": 'eu',
+      "publicKey": '-----BEGIN PUBLIC KEY-----MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDodf1SD0OOn6hIlDuKBza0Ed0OqtwyVJwiyjmE9BJaZ7y8ZUfcF+SKmd0l2cDPM45XIg2tAFux5n29uoKyHwSt+6tCi5CJA5Z1/1eZruRRqABLonV77KS3HUtvOgqRLDnKSV89dYZkM++NwmzOPgIF422mvc+VukcVOBfc8/AHQIDAQAB-----END PUBLIC KEY-----',
       "readyTimeout": undefined,
       "resetOnUpdate": undefined
     }
@@ -102,6 +108,8 @@ const config: CapacitorConfig = {
       appId: '4100e356-e851-47fe-9d3c-b411eb325a99',
       autoDeleteBundles: undefined,
       enabled: undefined,
+      location: 'eu',
+      publicKey: '-----BEGIN PUBLIC KEY-----MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDDodf1SD0OOn6hIlDuKBza0Ed0OqtwyVJwiyjmE9BJaZ7y8ZUfcF+SKmd0l2cDPM45XIg2tAFux5n29uoKyHwSt+6tCi5CJA5Z1/1eZruRRqABLonV77KS3HUtvOgqRLDnKSV89dYZkM++NwmzOPgIF422mvc+VukcVOBfc8/AHQIDAQAB-----END PUBLIC KEY-----',
       readyTimeout: undefined,
       resetOnUpdate: undefined,
     },
@@ -393,7 +401,7 @@ Only available on Android and iOS.
 ### ready()
 
 ```typescript
-ready() => Promise<void>
+ready() => Promise<ReadyResult>
 ```
 
 Notify the plugin that the app is ready to use and no rollback is needed.
@@ -403,6 +411,8 @@ to prevent the app from being reset to the default bundle.
 
 Only available on Android and iOS.
 
+**Returns:** <code>Promise&lt;<a href="#readyresult">ReadyResult</a>&gt;</code>
+
 **Since:** 5.0.0
 
 --------------------
@@ -530,10 +540,11 @@ Only available on Android and iOS.
 
 #### DownloadBundleOptions
 
-| Prop           | Type                | Description                                                                                               | Since |
-| -------------- | ------------------- | --------------------------------------------------------------------------------------------------------- | ----- |
-| **`url`**      | <code>string</code> | The URL of the bundle to download. The bundle must be a ZIP file containing at least a `index.html` file. | 5.0.0 |
-| **`bundleId`** | <code>string</code> | The unique identifier of the bundle.                                                                      | 5.0.0 |
+| Prop           | Type                | Description                                                                                                       | Since |
+| -------------- | ------------------- | ----------------------------------------------------------------------------------------------------------------- | ----- |
+| **`bundleId`** | <code>string</code> | The unique identifier of the bundle.                                                                              | 5.0.0 |
+| **`checksum`** | <code>string</code> | The checksum of the bundle to verify the integrity of the ZIP file. Must be a SHA-256 hash in hexadecimal format. | 6.1.0 |
+| **`url`**      | <code>string</code> | The URL of the bundle to download. The bundle must be a ZIP file containing at least a `index.html` file.         | 5.0.0 |
 
 
 #### GetBundleResult
@@ -585,6 +596,15 @@ Only available on Android and iOS.
 | **`versionName`** | <code>string</code> | The version name of the app. On **Android**, this is the `versionName` from the `android/app/build.gradle` file. On **iOS**, this is the `CFBundleShortVersionString` from the `Info.plist` file. | 5.0.0 |
 
 
+#### ReadyResult
+
+| Prop                   | Type                        | Description                                                                             | Since |
+| ---------------------- | --------------------------- | --------------------------------------------------------------------------------------- | ----- |
+| **`previousBundleId`** | <code>string \| null</code> | The identifier of the previous bundle used. If `null`, the default bundle was used.     | 7.0.0 |
+| **`currentBundleId`**  | <code>string \| null</code> | The identifier of the current bundle used. If `null`, the default bundle is being used. | 7.0.0 |
+| **`rollback`**         | <code>boolean</code>        | Whether or not the app was reset to the default bundle.                                 | 7.0.0 |
+
+
 #### SetBundleOptions
 
 | Prop           | Type                | Description                                 | Since |
@@ -630,7 +650,7 @@ If you want to disable the plugin to test other parts of your app, you can set t
 
 Live updates are only supported for [binary-compatible changes](https://capawesome.io/cloud/live-updates/faq/#what-are-binary-compatible-changes) (e.g. HTML, CSS, JavaScript).
 If you change native code, such as adding a new plugin, you need to resubmit your app to the app stores.
-For this reason, you must be careful to limit live updates to compatible native versions of your app.
+For this reason, you must be careful to [restrict live updates to compatible native versions](https://capawesome.io/blog/how-to-restrict-capacitor-live-updates-to-native-versions/) of your app.
 
 ## Changelog
 

package/android/src/main/java/io/capawesome/capacitorjs/plugins/liveupdate/LiveUpdate.java

@@ -6,8 +6,10 @@ import android.content.pm.PackageInfo;
 import android.content.pm.PackageManager;
 import android.os.Build;
 import android.os.Handler;
+import android.util.Base64;
 import androidx.annotation.NonNull;
 import androidx.annotation.Nullable;
+import com.getcapacitor.Bridge;
 import com.getcapacitor.Logger;
 import com.getcapacitor.plugin.WebView;
 import io.capawesome.capacitorjs.plugins.liveupdate.classes.api.GetLatestBundleResponse;
@@ -23,12 +25,18 @@ import io.capawesome.capacitorjs.plugins.liveupdate.classes.results.GetCustomIdR
 import io.capawesome.capacitorjs.plugins.liveupdate.classes.results.GetDeviceIdResult;
 import io.capawesome.capacitorjs.plugins.liveupdate.classes.results.GetVersionCodeResult;
 import io.capawesome.capacitorjs.plugins.liveupdate.classes.results.GetVersionNameResult;
+import io.capawesome.capacitorjs.plugins.liveupdate.classes.results.ReadyResult;
 import io.capawesome.capacitorjs.plugins.liveupdate.classes.results.SyncResult;
 import io.capawesome.capacitorjs.plugins.liveupdate.interfaces.EmptyCallback;
 import io.capawesome.capacitorjs.plugins.liveupdate.interfaces.NonEmptyCallback;
 import io.capawesome.capacitorjs.plugins.liveupdate.interfaces.Result;
 import java.io.File;
 import java.io.IOException;
+import java.security.KeyFactory;
+import java.security.MessageDigest;
+import java.security.PublicKey;
+import java.security.Signature;
+import java.security.spec.X509EncodedKeySpec;
 import java.util.Arrays;
 import java.util.UUID;
 import net.lingala.zip4j.ZipFile;
@@ -48,11 +56,11 @@ import org.json.JSONObject;
 
 public class LiveUpdate {
 
+    public static final String DEFAULT_WEB_ASSET_DIR = Bridge.DEFAULT_WEB_ASSET_DIR;
+
     @NonNull
     private final LiveUpdateConfig config;
 
-    private final String defaultWebAssetDir;
-
     @NonNull
     private final LiveUpdatePlugin plugin;
 
@@ -65,9 +73,10 @@ public class LiveUpdate {
     private final String bundlesDirectory = "_capacitor_live_update_bundles";
     private final Handler rollbackHandler = new Handler();
 
+    private boolean rollbackPerformed = false;
+
     public LiveUpdate(@NonNull LiveUpdateConfig config, @NonNull LiveUpdatePlugin plugin) throws PackageManager.NameNotFoundException {
         this.config = config;
-        this.defaultWebAssetDir = plugin.getBridge().DEFAULT_WEB_ASSET_DIR;
         this.plugin = plugin;
         this.preferences = new LiveUpdatePreferences(plugin.getContext());
         this.webViewSettingsEditor = plugin.getContext().getSharedPreferences(WebView.WEBVIEW_PREFS_NAME, Activity.MODE_PRIVATE).edit();
@@ -97,6 +106,7 @@ public class LiveUpdate {
 
     public void downloadBundle(@NonNull DownloadBundleOptions options, @NonNull EmptyCallback callback) throws Exception {
         String bundleId = options.getBundleId();
+        String checksum = options.getChecksum();
         String url = options.getUrl();
 
         // Check if the bundle already exists
@@ -107,14 +117,11 @@ public class LiveUpdate {
         }
 
         // Download the bundle
-        downloadBundle(bundleId, url, callback);
+        downloadBundle(bundleId, checksum, null, url, callback);
     }
 
     public void getBundle(@NonNull NonEmptyCallback callback) {
         String bundleId = getCurrentBundleId();
-        if (bundleId.equals(defaultWebAssetDir)) {
-            bundleId = null;
-        }
         GetBundleResult result = new GetBundleResult(bundleId);
         callback.success(result);
     }
@@ -155,12 +162,18 @@ public class LiveUpdate {
         callback.success(result);
     }
 
-    public void ready() {
+    public void ready(@NonNull NonEmptyCallback callback) {
         Logger.debug(LiveUpdatePlugin.TAG, "App is ready.");
         stopRollbackTimer();
         if (config.getAutoDeleteBundles()) {
             deleteUnusedBundles();
         }
+        String currentBundleId = getCurrentBundleId();
+        String previousBundleId = getPreviousBundleId();
+        ReadyResult result = new ReadyResult(currentBundleId, previousBundleId, rollbackPerformed);
+        callback.success(result);
+        setPreviousBundleId(currentBundleId);
+        rollbackPerformed = false;
     }
 
     public void reload() {
@@ -215,6 +228,8 @@ public class LiveUpdate {
                 @Override
                 public void success(@NonNull GetLatestBundleResponse result) {
                     String latestBundleId = result.getBundleId();
+                    String checksum = result.getChecksum();
+                    String signature = result.getSignature();
                     String url = result.getUrl();
 
                     // Check if the bundle already exists
@@ -233,6 +248,8 @@ public class LiveUpdate {
                     // Download and unzip the bundle
                     downloadBundle(
                         latestBundleId,
+                        checksum,
+                        signature,
                         url,
                         new EmptyCallback() {
                             @Override
@@ -290,6 +307,31 @@ public class LiveUpdate {
         return new File(plugin.getContext().getFilesDir(), bundlesDirectory + "/" + bundle);
     }
 
+    private byte[] getChecksumForFileAsBytes(@NonNull File file) throws Exception {
+        try {
+            MessageDigest digest = MessageDigest.getInstance("SHA-256");
+            BufferedSource source = Okio.buffer(Okio.source(file));
+            Buffer buffer = new Buffer();
+            for (long bytesRead; (bytesRead = source.read(buffer, 2048)) != -1;) {
+                digest.update(buffer.readByteArray());
+            }
+            source.close();
+            return digest.digest();
+        } catch (IOException exception) {
+            Logger.error(LiveUpdatePlugin.TAG, exception.getMessage(), exception);
+            throw new Exception(LiveUpdatePlugin.ERROR_CHECKSUM_CALCULATION_FAILED);
+        }
+    }
+
+    private String getChecksumForFileAsString(@NonNull File file) throws Exception {
+        byte[] checksumBytes = getChecksumForFileAsBytes(file);
+        StringBuilder checksum = new StringBuilder();
+        for (byte checksumByte : checksumBytes) {
+            checksum.append(Integer.toString((checksumByte & 0xff) + 0x100, 16).substring(1));
+        }
+        return checksum.toString();
+    }
+
     private void createBundlesDirectory() {
         File bundlesDirectory = buildBundlesDirectory();
         if (!bundlesDirectory.exists()) {
@@ -297,6 +339,19 @@ public class LiveUpdate {
         }
     }
 
+    private PublicKey createPublicKeyFromString(@NonNull String value) throws Exception {
+        try {
+            value = value.replace("-----BEGIN PUBLIC KEY-----", "").replace("-----END PUBLIC KEY-----", "").replace("\n", "");
+            byte[] byteKey = Base64.decode(value, Base64.DEFAULT);
+            X509EncodedKeySpec X509publicKey = new X509EncodedKeySpec(byteKey);
+            KeyFactory keyFactory = KeyFactory.getInstance("RSA");
+            return keyFactory.generatePublic(X509publicKey);
+        } catch (Exception exception) {
+            Logger.error(LiveUpdatePlugin.TAG, exception.getMessage(), exception);
+            throw new Exception(LiveUpdatePlugin.ERROR_PUBLIC_KEY_INVALID);
+        }
+    }
+
     private void deleteBundle(@NonNull String bundleId) {
         File bundleDirectory = buildBundleDirectoryFor(bundleId);
         deleteFileRecursively(bundleDirectory);
@@ -320,7 +375,13 @@ public class LiveUpdate {
         }
     }
 
-    private void downloadBundle(@NonNull String bundleId, @NonNull String url, @NonNull EmptyCallback callback) {
+    private void downloadBundle(
+        @NonNull String bundleId,
+        @Nullable String expectedChecksum,
+        @Nullable String signature,
+        @NonNull String url,
+        @NonNull EmptyCallback callback
+    ) {
         downloadFile(
             url,
             new NonEmptyCallback<File>() {
@@ -332,6 +393,28 @@ public class LiveUpdate {
                 @Override
                 public void success(@NonNull File result) {
                     try {
+                        // Verify the signature
+                        String publicKey = config.getPublicKey();
+                        if (publicKey != null) {
+                            if (signature == null) {
+                                throw new Exception(LiveUpdatePlugin.ERROR_SIGNATURE_MISSING);
+                            }
+                            PublicKey key = createPublicKeyFromString(publicKey);
+                            // Verify the signature
+                            boolean verified = verifySignatureForFile(result, signature, key);
+                            if (!verified) {
+                                throw new Exception(LiveUpdatePlugin.ERROR_SIGNATURE_VERIFICATION_FAILED);
+                            }
+                        }
+                        // Verify the checksum
+                        else if (expectedChecksum != null) {
+                            // Calculate the checksum
+                            String receivedChecksum = getChecksumForFileAsString(result);
+                            if (!expectedChecksum.equals(receivedChecksum)) {
+                                throw new Exception(LiveUpdatePlugin.ERROR_CHECKSUM_MISMATCH);
+                            }
+                        }
+
                         // Add the bundle
                         addBundle(bundleId, result);
 
@@ -395,9 +478,13 @@ public class LiveUpdate {
     @Nullable
     private void fetchLatestBundle(@NonNull NonEmptyCallback<GetLatestBundleResponse> callback)
         throws PackageManager.NameNotFoundException {
+        String host = "api.cloud.capawesome.io";
+        if (config.getLocation() != null && config.getLocation().equals("eu")) {
+            host = "api.cloud.capawesome.eu";
+        }
         HttpUrl url = new HttpUrl.Builder()
             .scheme("https")
-            .host("api.cloud.capawesome.io")
+            .host(host)
             .addPathSegment("v1")
             .addPathSegment("apps")
             .addPathSegment(config.getAppId())
@@ -477,8 +564,8 @@ public class LiveUpdate {
      */
     private String getCurrentBundleId() {
         String currentPath = getCurrentCapacitorServerPath();
-        if (currentPath.equals(defaultWebAssetDir)) {
-            return defaultWebAssetDir;
+        if (currentPath.equals(DEFAULT_WEB_ASSET_DIR)) {
+            return DEFAULT_WEB_ASSET_DIR;
         }
         return new File(currentPath).getName();
     }
@@ -506,8 +593,8 @@ public class LiveUpdate {
     @NonNull
     private String getNextBundleId() {
         String nextPath = getNextCapacitorServerPath();
-        if (nextPath.equals(defaultWebAssetDir)) {
-            return defaultWebAssetDir;
+        if (nextPath.equals(DEFAULT_WEB_ASSET_DIR)) {
+            return DEFAULT_WEB_ASSET_DIR;
         }
         return new File(nextPath).getName();
     }
@@ -520,7 +607,12 @@ public class LiveUpdate {
         return plugin
             .getContext()
             .getSharedPreferences(WebView.WEBVIEW_PREFS_NAME, Activity.MODE_PRIVATE)
-            .getString(WebView.CAP_SERVER_PATH, defaultWebAssetDir);
+            .getString(WebView.CAP_SERVER_PATH, DEFAULT_WEB_ASSET_DIR);
+    }
+
+    @Nullable
+    private String getPreviousBundleId() {
+        return preferences.getPreviousBundleId();
     }
 
     private boolean hasBundle(@NonNull String bundleId) {
@@ -535,7 +627,10 @@ public class LiveUpdate {
     }
 
     private void rollback() {
-        if (getCurrentBundleId() == defaultWebAssetDir) {
+        rollbackPerformed = true;
+        String currentBundleId = getCurrentBundleId();
+        setPreviousBundleId(currentBundleId);
+        if (currentBundleId.equals(DEFAULT_WEB_ASSET_DIR)) {
             Logger.debug(LiveUpdatePlugin.TAG, "App is not ready. Default bundle is already in use.");
             return;
         }
@@ -575,7 +670,7 @@ public class LiveUpdate {
     }
 
     private void setCurrentCapacitorServerPath(@NonNull String path) {
-        if (path.equals(defaultWebAssetDir)) {
+        if (path.equals(DEFAULT_WEB_ASSET_DIR)) {
             this.plugin.getBridge().setServerAssetPath(path);
         } else {
             this.plugin.getBridge().setServerBasePath(path);
@@ -584,7 +679,7 @@ public class LiveUpdate {
     }
 
     private void setCurrentCapacitorServerPathToDefaultWebAssetDir() {
-        setCurrentCapacitorServerPath(defaultWebAssetDir);
+        setCurrentCapacitorServerPath(DEFAULT_WEB_ASSET_DIR);
     }
 
     private void setNextBundle(@NonNull String bundleId) {
@@ -598,7 +693,11 @@ public class LiveUpdate {
     }
 
     private void setNextCapacitorServerPathToDefaultWebAssetDir() {
-        setNextCapacitorServerPath(defaultWebAssetDir);
+        setNextCapacitorServerPath(DEFAULT_WEB_ASSET_DIR);
+    }
+
+    private void setPreviousBundleId(@Nullable String bundleId) {
+        preferences.setPreviousBundleId(bundleId);
     }
 
     private void startRollbackTimer() {
@@ -617,6 +716,24 @@ public class LiveUpdate {
         return destination;
     }
 
+    private boolean verifySignatureForFile(@NonNull File file, @NonNull String signature, @NonNull PublicKey key) throws Exception {
+        try {
+            byte[] signatureBytes = Base64.decode(signature, Base64.DEFAULT);
+            Signature sig = Signature.getInstance("SHA256withRSA");
+            sig.initVerify(key);
+            BufferedSource source = Okio.buffer(Okio.source(file));
+            Buffer buffer = new Buffer();
+            for (long bytesRead; (bytesRead = source.read(buffer, 2048)) != -1;) {
+                sig.update(buffer.readByteArray());
+            }
+            source.close();
+            return sig.verify(signatureBytes);
+        } catch (Exception exception) {
+            Logger.error(LiveUpdatePlugin.TAG, exception.getMessage(), exception);
+            throw new Exception(LiveUpdatePlugin.ERROR_SIGNATURE_VERIFICATION_FAILED);
+        }
+    }
+
     private boolean wasUpdated() throws PackageManager.NameNotFoundException {
         int lastVersionCode = preferences.getLastVersionCode();
         int currentVersionCode = getPackageInfo().versionCode;

package/android/src/main/java/io/capawesome/capacitorjs/plugins/liveupdate/LiveUpdateConfig.java

@@ -1,6 +1,7 @@
 package io.capawesome.capacitorjs.plugins.liveupdate;
 
 import androidx.annotation.Nullable;
+import java.security.Key;
 
 public class LiveUpdateConfig {
 
@@ -9,6 +10,13 @@ public class LiveUpdateConfig {
 
     private boolean autoDeleteBundles = false;
     private boolean enabled = true;
+
+    @Nullable
+    private String location = null;
+
+    @Nullable
+    private String publicKey = null;
+
     private int readyTimeout = 10000;
     private boolean resetOnUpdate = true;
 
@@ -25,6 +33,16 @@ public class LiveUpdateConfig {
         return enabled;
     }
 
+    @Nullable
+    public String getLocation() {
+        return location;
+    }
+
+    @Nullable
+    public String getPublicKey() {
+        return publicKey;
+    }
+
     public int getReadyTimeout() {
         return readyTimeout;
     }
@@ -45,6 +63,14 @@ public class LiveUpdateConfig {
         this.enabled = enabled;
     }
 
+    public void setLocation(@Nullable String location) {
+        this.location = location;
+    }
+
+    public void setPublicKey(@Nullable String publicKey) {
+        this.publicKey = publicKey;
+    }
+
     public void setReadyTimeout(int readyTimeout) {
         this.readyTimeout = readyTimeout;
     }

package/android/src/main/java/io/capawesome/capacitorjs/plugins/liveupdate/LiveUpdatePlugin.java

@@ -19,16 +19,21 @@ import io.capawesome.capacitorjs.plugins.liveupdate.interfaces.Result;
 public class LiveUpdatePlugin extends Plugin {
 
     public static final String TAG = "LiveUpdate";
-    public static final String VERSION = "6.0.7";
+    public static final String VERSION = "6.2.0-dev.0a2a6a5.1722676620";
     public static final String SHARED_PREFERENCES_NAME = "CapawesomeLiveUpdate"; // DO NOT CHANGE
     public static final String ERROR_APP_ID_MISSING = "appId must be configured.";
     public static final String ERROR_BUNDLE_EXISTS = "bundle already exists.";
     public static final String ERROR_BUNDLE_ID_MISSING = "bundleId must be provided.";
     public static final String ERROR_BUNDLE_INDEX_HTML_MISSING = "The bundle does not contain an index.html file.";
     public static final String ERROR_BUNDLE_NOT_FOUND = "bundle not found.";
+    public static final String ERROR_CHECKSUM_CALCULATION_FAILED = "Failed to calculate checksum.";
+    public static final String ERROR_CHECKSUM_MISMATCH = "Checksum mismatch.";
     public static final String ERROR_CUSTOM_ID_MISSING = "customId must be provided.";
     public static final String ERROR_DOWNLOAD_FAILED = "Bundle could not be downloaded.";
     public static final String ERROR_URL_MISSING = "url must be provided.";
+    public static final String ERROR_SIGNATURE_VERIFICATION_FAILED = "Signature verification failed.";
+    public static final String ERROR_PUBLIC_KEY_INVALID = "Invalid public key.";
+    public static final String ERROR_SIGNATURE_MISSING = "Bundle does not contain a signature.";
 
     @Nullable
     private LiveUpdateConfig config;
@@ -78,18 +83,19 @@ public class LiveUpdatePlugin extends Plugin {
     @PluginMethod
     public void downloadBundle(PluginCall call) {
         try {
-            String url = call.getString("url");
-            if (url == null) {
-                call.reject(ERROR_URL_MISSING);
-                return;
-            }
             String bundleId = call.getString("bundleId");
             if (bundleId == null) {
                 call.reject(ERROR_BUNDLE_ID_MISSING);
                 return;
             }
+            String checksum = call.getString("checksum");
+            String url = call.getString("url");
+            if (url == null) {
+                call.reject(ERROR_URL_MISSING);
+                return;
+            }
 
-            DownloadBundleOptions options = new DownloadBundleOptions(bundleId, url);
+            DownloadBundleOptions options = new DownloadBundleOptions(bundleId, checksum, url);
             EmptyCallback callback = new EmptyCallback() {
                 @Override
                 public void success() {
@@ -274,8 +280,20 @@ public class LiveUpdatePlugin extends Plugin {
     @PluginMethod
     public void ready(PluginCall call) {
         try {
-            implementation.ready();
-            call.resolve();
+            NonEmptyCallback<Result> callback = new NonEmptyCallback<>() {
+                @Override
+                public void success(Result result) {
+                    call.resolve(result.toJSObject());
+                }
+
+                @Override
+                public void error(Exception exception) {
+                    Logger.error(TAG, exception.getMessage(), exception);
+                    call.reject(exception.getMessage());
+                }
+            };
+
+            implementation.ready(callback);
         } catch (Exception exception) {
             Logger.error(TAG, exception.getMessage(), exception);
             call.reject(exception.getMessage());
@@ -427,6 +445,10 @@ public class LiveUpdatePlugin extends Plugin {
         config.setAutoDeleteBundles(autoDeleteBundles);
         boolean enabled = getConfig().getBoolean("enabled", config.getEnabled());
         config.setEnabled(enabled);
+        String location = getConfig().getString("location", config.getLocation());
+        config.setLocation(location);
+        String publicKey = getConfig().getString("publicKey", config.getPublicKey());
+        config.setPublicKey(publicKey);
         int readyTimeout = getConfig().getInt("readyTimeout", config.getReadyTimeout());
         config.setReadyTimeout(readyTimeout);
         boolean resetOnUpdate = getConfig().getBoolean("resetOnUpdate", config.getResetOnUpdate());

package/android/src/main/java/io/capawesome/capacitorjs/plugins/liveupdate/LiveUpdatePreferences.java

@@ -19,6 +19,7 @@ public class LiveUpdatePreferences {
     private final String deviceIdKey = "deviceId"; // DO NOT CHANGE
     private final String customIdKey = "customId"; // DO NOT CHANGE
     private final String lastVersionCodeKey = "lastVersionCode"; // DO NOT CHANGE
+    private final String previousBundleIdKey = "previousBundleId"; // DO NOT CHANGE
 
     public LiveUpdatePreferences(@NonNull Context context) {
         this.context = context;
@@ -52,6 +53,13 @@ public class LiveUpdatePreferences {
         return context.getSharedPreferences(LiveUpdatePlugin.SHARED_PREFERENCES_NAME, Activity.MODE_PRIVATE).getInt(lastVersionCodeKey, 0);
     }
 
+    @Nullable
+    public String getPreviousBundleId() {
+        return context
+            .getSharedPreferences(LiveUpdatePlugin.SHARED_PREFERENCES_NAME, Activity.MODE_PRIVATE)
+            .getString(previousBundleIdKey, null);
+    }
+
     public void setChannel(@Nullable String channel) {
         if (channel == null) {
             settingsEditor.remove(channelKey);
@@ -83,4 +91,13 @@ public class LiveUpdatePreferences {
         settingsEditor.putInt(lastVersionCodeKey, lastVersionCode);
         settingsEditor.apply();
     }
+
+    public void setPreviousBundleId(@Nullable String bundleId) {
+        if (bundleId == null) {
+            settingsEditor.remove(previousBundleIdKey);
+        } else {
+            settingsEditor.putString(previousBundleIdKey, bundleId);
+        }
+        settingsEditor.apply();
+    }
 }

package/android/src/main/java/io/capawesome/capacitorjs/plugins/liveupdate/classes/api/GetLatestBundleResponse.java

@@ -6,10 +6,29 @@ import org.json.JSONObject;
 public class GetLatestBundleResponse {
 
     private String bundleId;
+
+    @Nullable
+    private String checksum;
+
+    @Nullable
+    private String signature;
+
     private String url;
 
     public GetLatestBundleResponse(JSONObject responseJson) {
         this.bundleId = responseJson.optString("bundleId");
+        String checksum = responseJson.optString("checksum", "null");
+        if (checksum.equals("null")) {
+            this.checksum = null;
+        } else {
+            this.checksum = checksum;
+        }
+        String signature = responseJson.optString("signature", "null");
+        if (signature.equals("null")) {
+            this.signature = null;
+        } else {
+            this.signature = signature;
+        }
         this.url = responseJson.optString("url");
     }
 
@@ -17,6 +36,16 @@ public class GetLatestBundleResponse {
         return bundleId;
     }
 
+    @Nullable
+    public String getChecksum() {
+        return checksum;
+    }
+
+    @Nullable
+    public String getSignature() {
+        return signature;
+    }
+
     public String getUrl() {
         return url;
     }