@expo/app-integrity 0.1.7 → 0.1.8

package/CHANGELOG.md

@@ -10,6 +10,12 @@
 
 ### 💡 Others
 
+## 0.1.8 — 2025-09-22
+
+### 🎉 New features
+
+- [Android] Add Android hardware attestation support. ([#39725](https://github.com/expo/expo/pull/39725) by [@nishan](https://github.com/intergalacticspacehighway))
+
 ## 0.1.7 — 2025-09-11
 
 ### 🐛 Bug fixes

package/android/build.gradle

@@ -4,13 +4,13 @@ plugins {
 }
 
 group = 'expo.modules.integrity'
-version = '0.1.7'
+version = '0.1.8'
 
 android {
   namespace 'expo.modules.integrity'
   defaultConfig {
     versionCode 1
-    versionName "0.1.7"
+    versionName "0.1.8"
   }
 }
 

package/android/src/main/java/expo/modules/integrity/IntegrityErrorCodes.kt

@@ -22,4 +22,8 @@ object IntegrityErrorCodes {
   const val NOT_PREPARED = "ERR_APP_INTEGRITY_PROVIDER_NOT_PREPARED"
   const val DECODE_FAILED = "ERR_APP_INTEGRITY_DECODE_FAILED"
   const val UNKNOWN = "ERR_APP_INTEGRITY_UNKNOWN"
+  const val HARDWARE_ATTESTATION_NOT_SUPPORTED = "ERR_APP_INTEGRITY_HARDWARE_ATTESTATION_NOT_SUPPORTED"
+  const val HARDWARE_ATTESTATION_KEY_GENERATION_FAILED = "ERR_APP_INTEGRITY_HARDWARE_ATTESTATION_KEY_GENERATION_FAILED"
+  const val HARDWARE_ATTESTATION_FAILED = "ERR_APP_INTEGRITY_HARDWARE_ATTESTATION_FAILED"
+  const val HARDWARE_ATTESTATION_CERTIFICATE_CHAIN_INVALID = "ERR_APP_INTEGRITY_HARDWARE_ATTESTATION_CERTIFICATE_CHAIN_INVALID"
 }

package/android/src/main/java/expo/modules/integrity/IntegrityModule.kt

@@ -1,5 +1,9 @@
 package expo.modules.integrity
 
+import android.os.Build
+import android.security.keystore.KeyGenParameterSpec
+import android.security.keystore.KeyProperties
+import android.util.Base64
 import com.google.android.gms.tasks.Task
 import com.google.android.play.core.integrity.StandardIntegrityManager.StandardIntegrityToken
 import com.google.android.play.core.integrity.StandardIntegrityManager.StandardIntegrityTokenRequest
@@ -11,6 +15,9 @@ import expo.modules.kotlin.modules.Module
 import expo.modules.kotlin.modules.ModuleDefinition
 import expo.modules.kotlin.Promise
 import com.google.android.play.core.integrity.StandardIntegrityManager.PrepareIntegrityTokenRequest
+import java.security.KeyPairGenerator
+import java.security.KeyStore
+import java.security.cert.X509Certificate
 
 class IntegrityModule : Module() {
   private var integrityTokenProvider: StandardIntegrityManager.StandardIntegrityTokenProvider? =
@@ -20,6 +27,7 @@ class IntegrityModule : Module() {
   companion object {
     private const val PREPARE_INTEGRITY_TOKEN_PROVIDER_METHOD_NAME = "prepareIntegrityTokenProvider"
     private const val REQUEST_INTEGRITY_CHECK_METHOD_NAME = "requestIntegrityCheck"
+    private const val ANDROID_KEYSTORE = "AndroidKeyStore"
   }
 
   override fun definition() = ModuleDefinition {
@@ -86,6 +94,30 @@ class IntegrityModule : Module() {
         }
       )
     }
+
+    AsyncFunction("isHardwareAttestationSupported") {
+      try {
+        isHardwareAttestationSupported()
+      } catch (e: Exception) {
+        throw IntegrityException(IntegrityErrorCodes.HARDWARE_ATTESTATION_NOT_SUPPORTED, e.message ?: "Failed to check hardware attestation support", e)
+      }
+    }
+
+    AsyncFunction("generateHardwareAttestedKey") { keyAlias: String, challenge: String ->
+      try {
+        generateHardwareAttestedKey(keyAlias, challenge)
+      } catch (e: Exception) {
+        throw handleHardwareAttestationError(e)
+      }
+    }
+
+    AsyncFunction("getAttestationCertificateChain") { keyAlias: String ->
+      try {
+        getAttestationCertificateChain(keyAlias)
+      } catch (e: Exception) {
+        throw handleHardwareAttestationError(e)
+      }
+    }
   }
 
   private fun handleIntegrityError(exception: Throwable?): IntegrityException {
@@ -129,4 +161,73 @@ class IntegrityModule : Module() {
       else -> IntegrityErrorCodes.UNKNOWN
     }
   }
+
+  private fun handleHardwareAttestationError(exception: Throwable): IntegrityException {
+    return when {
+      exception.message?.contains("not supported", ignoreCase = true) == true ->
+        IntegrityException(IntegrityErrorCodes.HARDWARE_ATTESTATION_NOT_SUPPORTED, exception.message ?: "Hardware attestation not supported", exception)
+      exception.message?.contains("key generation", ignoreCase = true) == true ->
+        IntegrityException(IntegrityErrorCodes.HARDWARE_ATTESTATION_KEY_GENERATION_FAILED, exception.message ?: "Key generation failed", exception)
+      exception.message?.contains("certificate", ignoreCase = true) == true ->
+        IntegrityException(IntegrityErrorCodes.HARDWARE_ATTESTATION_CERTIFICATE_CHAIN_INVALID, exception.message ?: "Certificate chain invalid", exception)
+      else -> IntegrityException(IntegrityErrorCodes.HARDWARE_ATTESTATION_FAILED, exception.message ?: "Hardware attestation failed", exception)
+    }
+  }
+
+  private fun isHardwareAttestationSupported(): Boolean {
+    return try {
+      // Verify we can actually access the hardware keystore
+      val keyStore = KeyStore.getInstance(ANDROID_KEYSTORE)
+      keyStore.load(null)
+      true
+    } catch (e: Exception) {
+      throw e
+    }
+  }
+
+  private fun generateHardwareAttestedKey(keyAlias: String, challenge: String) {
+    if (Build.VERSION.SDK_INT < Build.VERSION_CODES.N) {
+      throw Exception("Hardware attestation is not supported on this Android version.")
+    }
+    try {
+      val keyStore = KeyStore.getInstance(ANDROID_KEYSTORE)
+      keyStore.load(null)
+
+      if (keyStore.containsAlias(keyAlias)) {
+        keyStore.deleteEntry(keyAlias)
+      }
+
+      val keyPairGenerator = KeyPairGenerator.getInstance(KeyProperties.KEY_ALGORITHM_EC, ANDROID_KEYSTORE)
+
+      val keyGenParameterSpec = KeyGenParameterSpec.Builder(
+        keyAlias,
+        KeyProperties.PURPOSE_SIGN
+      )
+        .setDigests(KeyProperties.DIGEST_SHA256)
+        .setAttestationChallenge(challenge.toByteArray())
+        .build()
+
+      keyPairGenerator.initialize(keyGenParameterSpec)
+      keyPairGenerator.generateKeyPair()
+    } catch (e: Exception) {
+      throw Exception("Failed to generate hardware-attested key: ${e.message}", e)
+    }
+  }
+
+  private fun getAttestationCertificateChain(keyAlias: String): List<String> {
+    try {
+      val keyStore = KeyStore.getInstance(ANDROID_KEYSTORE)
+      keyStore.load(null)
+
+      val certificateChain = keyStore.getCertificateChain(keyAlias)
+        ?: throw Exception("No certificate chain found for key alias: $keyAlias")
+
+      return certificateChain.map { certificate ->
+        val x509Certificate = certificate as X509Certificate
+        Base64.encodeToString(x509Certificate.encoded, Base64.NO_WRAP)
+      }
+    } catch (e: Exception) {
+      throw Exception("Failed to get certificate chain: ${e.message}", e)
+    }
+  }
 }

package/build/AppIntegrity.d.ts

@@ -40,4 +40,27 @@ export declare function prepareIntegrityTokenProvider(cloudProjectNumber: string
  * @platform android
  */
 export declare function requestIntegrityCheck(requestHash: string): Promise<string>;
+/**
+ * Checks if hardware attestation is supported on this device.
+ * @return A Promise that is fulfilled with a boolean indicating support.
+ * @platform android
+ */
+export declare function isHardwareAttestationSupported(): Promise<boolean>;
+/**
+ * Generates a hardware-attested key pair in the Android Keystore.
+ * This key can be used for attestation on GrapheneOS and other secure Android distributions.
+ * @param keyAlias A unique identifier for the key.
+ * @param challenge A challenge string from your server.
+ * @return A Promise that resolves when the key is generated successfully.
+ * @platform android
+ */
+export declare function generateHardwareAttestedKey(keyAlias: string, challenge: string): Promise<void>;
+/**
+ * Retrieves the attestation certificate chain for a hardware-attested key.
+ * The certificate chain can be validated on your server to verify device integrity.
+ * @param keyAlias The identifier of the key to get certificates for.
+ * @return A Promise that is fulfilled with an array of base64-encoded X.509 certificates.
+ * @platform android
+ */
+export declare function getAttestationCertificateChain(keyAlias: string): Promise<string[]>;
 //# sourceMappingURL=AppIntegrity.d.ts.map

package/build/AppIntegrity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AppIntegrity.d.ts","sourceRoot":"","sources":["../src/AppIntegrity.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,eAAO,MAAM,WAAW,SAA8D,CAAC;AAEvF;;;;GAIG;AACH,wBAAsB,WAAW,oBAKhC;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,mBAK/D;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,mBAKvE;AAED;;;;;GAKG;AACH,wBAAsB,6BAA6B,CAAC,kBAAkB,EAAE,MAAM,iBAK7E;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,WAAW,EAAE,MAAM,mBAK9D"}
+{"version":3,"file":"AppIntegrity.d.ts","sourceRoot":"","sources":["../src/AppIntegrity.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,eAAO,MAAM,WAAW,SAA8D,CAAC;AAEvF;;;;GAIG;AACH,wBAAsB,WAAW,oBAKhC;AAED;;;;;;GAMG;AACH,wBAAsB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,mBAK/D;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,mBAKvE;AAED;;;;;GAKG;AACH,wBAAsB,6BAA6B,CAAC,kBAAkB,EAAE,MAAM,iBAK7E;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,WAAW,EAAE,MAAM,mBAK9D;AAED;;;;GAIG;AACH,wBAAsB,8BAA8B,qBAKnD;AAED;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,iBAKpF;AAED;;;;;;GAMG;AACH,wBAAsB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,qBAKpE"}

package/build/AppIntegrity.js

@@ -67,4 +67,42 @@ export async function requestIntegrityCheck(requestHash) {
     }
     return ExpoAppIntegrity.requestIntegrityCheck(requestHash);
 }
+/**
+ * Checks if hardware attestation is supported on this device.
+ * @return A Promise that is fulfilled with a boolean indicating support.
+ * @platform android
+ */
+export async function isHardwareAttestationSupported() {
+    if (Platform.OS !== 'android') {
+        return false;
+    }
+    return ExpoAppIntegrity.isHardwareAttestationSupported();
+}
+/**
+ * Generates a hardware-attested key pair in the Android Keystore.
+ * This key can be used for attestation on GrapheneOS and other secure Android distributions.
+ * @param keyAlias A unique identifier for the key.
+ * @param challenge A challenge string from your server.
+ * @return A Promise that resolves when the key is generated successfully.
+ * @platform android
+ */
+export async function generateHardwareAttestedKey(keyAlias, challenge) {
+    if (Platform.OS !== 'android') {
+        throw new Error('generateHardwareAttestedKey is only available on Android');
+    }
+    return ExpoAppIntegrity.generateHardwareAttestedKey(keyAlias, challenge);
+}
+/**
+ * Retrieves the attestation certificate chain for a hardware-attested key.
+ * The certificate chain can be validated on your server to verify device integrity.
+ * @param keyAlias The identifier of the key to get certificates for.
+ * @return A Promise that is fulfilled with an array of base64-encoded X.509 certificates.
+ * @platform android
+ */
+export async function getAttestationCertificateChain(keyAlias) {
+    if (Platform.OS !== 'android') {
+        throw new Error('getAttestationCertificateChain is only available on Android');
+    }
+    return ExpoAppIntegrity.getAttestationCertificateChain(keyAlias);
+}
 //# sourceMappingURL=AppIntegrity.js.map

package/build/AppIntegrity.js.map

@@ -1 +1 @@
-{"version":3,"file":"AppIntegrity.js","sourceRoot":"","sources":["../src/AppIntegrity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AAEvF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,QAAQ,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,gBAAgB,CAAC,WAAW,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAa,EAAE,SAAiB;IAC9D,IAAI,QAAQ,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,gBAAgB,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa,EAAE,SAAiB;IACtE,IAAI,QAAQ,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,gBAAgB,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,kBAA0B;IAC5E,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,gBAAgB,CAAC,6BAA6B,CAAC,kBAAkB,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,WAAmB;IAC7D,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,gBAAgB,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;AAC7D,CAAC","sourcesContent":["import { Platform } from 'react-native';\n\nimport ExpoAppIntegrity from './ExpoAppIntegrity';\n\n/**\n * A boolean value that indicates whether a particular device provides the [App Attest](https://developer.apple.com/documentation/devicecheck/establishing-your-app-s-integrity) service.\n * Not all device types support the App Attest service, so check for support before using the service.\n * @platform ios\n */\nexport const isSupported = Platform.OS === 'ios' ? ExpoAppIntegrity.isSupported : true;\n\n/**\n * Creates a new cryptographic key for use with the App Attest service.\n * @return A Promise that is fulfilled with a string that contains the key identifier. The key itself is stored securely in the Secure Enclave.\n * @platform ios\n */\nexport async function generateKey() {\n  if (Platform.OS !== 'ios') {\n    throw new Error('generateAssertion is only available on iOS');\n  }\n  return ExpoAppIntegrity.generateKey();\n}\n\n/**\n * Asks Apple to attest to the validity of a generated cryptographic key.\n * @param keyId The identifier you received by calling the `generateKey` function.\n * @param challenge A challenge string from your server.\n * @return A Promise that is fulfilled with a string that contains the attestation data. A statement from Apple about the validity of the key associated with keyId. Send this to your server for processing.\n * @platform ios\n */\nexport async function attestKey(keyId: string, challenge: string) {\n  if (Platform.OS !== 'ios') {\n    throw new Error('generateAssertion is only available on iOS');\n  }\n  return ExpoAppIntegrity.attestKey(keyId, challenge);\n}\n\n/**\n * Creates a block of data that demonstrates the legitimacy of an instance of your app running on a device.\n * @param keyId The identifier you received by calling the `generateKey` function.\n * @param challenge A string to be signed with the attested private key.\n * @return A Promise that is fulfilled with a string that contains the assertion object. A data structure that you send to your server for processing.\n * @platform ios\n */\nexport async function generateAssertion(keyId: string, challenge: string) {\n  if (Platform.OS !== 'ios') {\n    throw new Error('generateAssertion is only available on iOS');\n  }\n  return ExpoAppIntegrity.generateAssertion(keyId, challenge);\n}\n\n/**\n * Prepares the integrity token provider for the given cloud project number.\n * @param cloudProjectNumber The cloud project number.\n * @return A Promise that is fulfilled if the integrity token provider is prepared successfully.\n * @platform android\n */\nexport async function prepareIntegrityTokenProvider(cloudProjectNumber: string) {\n  if (Platform.OS !== 'android') {\n    throw new Error('prepareIntegrityTokenProvider is only available on Android');\n  }\n  return ExpoAppIntegrity.prepareIntegrityTokenProvider(cloudProjectNumber);\n}\n\n/**\n * Requests an integrity verdict for the given request hash from Google Play.\n * @param requestHash A string representing the request hash.\n * @return A Promise that is fulfilled with a string that contains the integrity check result.\n * @platform android\n */\nexport async function requestIntegrityCheck(requestHash: string) {\n  if (Platform.OS !== 'android') {\n    throw new Error('requestIntegrityCheck is only available on Android');\n  }\n  return ExpoAppIntegrity.requestIntegrityCheck(requestHash);\n}\n"]}
+{"version":3,"file":"AppIntegrity.js","sourceRoot":"","sources":["../src/AppIntegrity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAElD;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;AAEvF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,QAAQ,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,gBAAgB,CAAC,WAAW,EAAE,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAa,EAAE,SAAiB;IAC9D,IAAI,QAAQ,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,gBAAgB,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAa,EAAE,SAAiB;IACtE,IAAI,QAAQ,CAAC,EAAE,KAAK,KAAK,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,gBAAgB,CAAC,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,kBAA0B;IAC5E,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,gBAAgB,CAAC,6BAA6B,CAAC,kBAAkB,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,WAAmB;IAC7D,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,gBAAgB,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B;IAClD,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,gBAAgB,CAAC,8BAA8B,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,QAAgB,EAAE,SAAiB;IACnF,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,gBAAgB,CAAC,2BAA2B,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,QAAgB;IACnE,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,gBAAgB,CAAC,8BAA8B,CAAC,QAAQ,CAAC,CAAC;AACnE,CAAC","sourcesContent":["import { Platform } from 'react-native';\n\nimport ExpoAppIntegrity from './ExpoAppIntegrity';\n\n/**\n * A boolean value that indicates whether a particular device provides the [App Attest](https://developer.apple.com/documentation/devicecheck/establishing-your-app-s-integrity) service.\n * Not all device types support the App Attest service, so check for support before using the service.\n * @platform ios\n */\nexport const isSupported = Platform.OS === 'ios' ? ExpoAppIntegrity.isSupported : true;\n\n/**\n * Creates a new cryptographic key for use with the App Attest service.\n * @return A Promise that is fulfilled with a string that contains the key identifier. The key itself is stored securely in the Secure Enclave.\n * @platform ios\n */\nexport async function generateKey() {\n  if (Platform.OS !== 'ios') {\n    throw new Error('generateAssertion is only available on iOS');\n  }\n  return ExpoAppIntegrity.generateKey();\n}\n\n/**\n * Asks Apple to attest to the validity of a generated cryptographic key.\n * @param keyId The identifier you received by calling the `generateKey` function.\n * @param challenge A challenge string from your server.\n * @return A Promise that is fulfilled with a string that contains the attestation data. A statement from Apple about the validity of the key associated with keyId. Send this to your server for processing.\n * @platform ios\n */\nexport async function attestKey(keyId: string, challenge: string) {\n  if (Platform.OS !== 'ios') {\n    throw new Error('generateAssertion is only available on iOS');\n  }\n  return ExpoAppIntegrity.attestKey(keyId, challenge);\n}\n\n/**\n * Creates a block of data that demonstrates the legitimacy of an instance of your app running on a device.\n * @param keyId The identifier you received by calling the `generateKey` function.\n * @param challenge A string to be signed with the attested private key.\n * @return A Promise that is fulfilled with a string that contains the assertion object. A data structure that you send to your server for processing.\n * @platform ios\n */\nexport async function generateAssertion(keyId: string, challenge: string) {\n  if (Platform.OS !== 'ios') {\n    throw new Error('generateAssertion is only available on iOS');\n  }\n  return ExpoAppIntegrity.generateAssertion(keyId, challenge);\n}\n\n/**\n * Prepares the integrity token provider for the given cloud project number.\n * @param cloudProjectNumber The cloud project number.\n * @return A Promise that is fulfilled if the integrity token provider is prepared successfully.\n * @platform android\n */\nexport async function prepareIntegrityTokenProvider(cloudProjectNumber: string) {\n  if (Platform.OS !== 'android') {\n    throw new Error('prepareIntegrityTokenProvider is only available on Android');\n  }\n  return ExpoAppIntegrity.prepareIntegrityTokenProvider(cloudProjectNumber);\n}\n\n/**\n * Requests an integrity verdict for the given request hash from Google Play.\n * @param requestHash A string representing the request hash.\n * @return A Promise that is fulfilled with a string that contains the integrity check result.\n * @platform android\n */\nexport async function requestIntegrityCheck(requestHash: string) {\n  if (Platform.OS !== 'android') {\n    throw new Error('requestIntegrityCheck is only available on Android');\n  }\n  return ExpoAppIntegrity.requestIntegrityCheck(requestHash);\n}\n\n/**\n * Checks if hardware attestation is supported on this device.\n * @return A Promise that is fulfilled with a boolean indicating support.\n * @platform android\n */\nexport async function isHardwareAttestationSupported() {\n  if (Platform.OS !== 'android') {\n    return false;\n  }\n  return ExpoAppIntegrity.isHardwareAttestationSupported();\n}\n\n/**\n * Generates a hardware-attested key pair in the Android Keystore.\n * This key can be used for attestation on GrapheneOS and other secure Android distributions.\n * @param keyAlias A unique identifier for the key.\n * @param challenge A challenge string from your server.\n * @return A Promise that resolves when the key is generated successfully.\n * @platform android\n */\nexport async function generateHardwareAttestedKey(keyAlias: string, challenge: string) {\n  if (Platform.OS !== 'android') {\n    throw new Error('generateHardwareAttestedKey is only available on Android');\n  }\n  return ExpoAppIntegrity.generateHardwareAttestedKey(keyAlias, challenge);\n}\n\n/**\n * Retrieves the attestation certificate chain for a hardware-attested key.\n * The certificate chain can be validated on your server to verify device integrity.\n * @param keyAlias The identifier of the key to get certificates for.\n * @return A Promise that is fulfilled with an array of base64-encoded X.509 certificates.\n * @platform android\n */\nexport async function getAttestationCertificateChain(keyAlias: string) {\n  if (Platform.OS !== 'android') {\n    throw new Error('getAttestationCertificateChain is only available on Android');\n  }\n  return ExpoAppIntegrity.getAttestationCertificateChain(keyAlias);\n}\n"]}

package/build/ExpoAppIntegrity.types.d.ts

@@ -9,5 +9,8 @@ export interface ExpoAppIntegrityModule extends NativeModule {
     generateAssertion(keyId: string, challenge: string): Promise<string>;
     prepareIntegrityTokenProvider(cloudProjectNumber: string): Promise<void>;
     requestIntegrityCheck(requestHash: string): Promise<string>;
+    isHardwareAttestationSupported(): Promise<boolean>;
+    generateHardwareAttestedKey(keyAlias: string, challenge: string): Promise<void>;
+    getAttestationCertificateChain(keyAlias: string): Promise<string[]>;
 }
 //# sourceMappingURL=ExpoAppIntegrity.types.d.ts.map

package/build/ExpoAppIntegrity.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ExpoAppIntegrity.types.d.ts","sourceRoot":"","sources":["../src/ExpoAppIntegrity.types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,YAAY;IAE1D,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAErE,6BAA6B,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC7D"}
+{"version":3,"file":"ExpoAppIntegrity.types.d.ts","sourceRoot":"","sources":["../src/ExpoAppIntegrity.types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,YAAY;IAE1D,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/B,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAErE,6BAA6B,CAAC,kBAAkB,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE5D,8BAA8B,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,8BAA8B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CACrE"}

package/build/ExpoAppIntegrity.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"ExpoAppIntegrity.types.js","sourceRoot":"","sources":["../src/ExpoAppIntegrity.types.ts"],"names":[],"mappings":"","sourcesContent":["import { NativeModule } from 'expo-modules-core/types';\n\n/**\n * @hidden\n */\nexport interface ExpoAppIntegrityModule extends NativeModule {\n  // iOS\n  isSupported: boolean;\n  generateKey(): Promise<string>;\n  attestKey(keyId: string, challenge: string): Promise<string>;\n  generateAssertion(keyId: string, challenge: string): Promise<string>;\n  // Android\n  prepareIntegrityTokenProvider(cloudProjectNumber: string): Promise<void>;\n  requestIntegrityCheck(requestHash: string): Promise<string>;\n}\n"]}
+{"version":3,"file":"ExpoAppIntegrity.types.js","sourceRoot":"","sources":["../src/ExpoAppIntegrity.types.ts"],"names":[],"mappings":"","sourcesContent":["import { NativeModule } from 'expo-modules-core/types';\n\n/**\n * @hidden\n */\nexport interface ExpoAppIntegrityModule extends NativeModule {\n  // iOS\n  isSupported: boolean;\n  generateKey(): Promise<string>;\n  attestKey(keyId: string, challenge: string): Promise<string>;\n  generateAssertion(keyId: string, challenge: string): Promise<string>;\n  // Android - Play Integrity\n  prepareIntegrityTokenProvider(cloudProjectNumber: string): Promise<void>;\n  requestIntegrityCheck(requestHash: string): Promise<string>;\n  // Android - Hardware Attestation\n  isHardwareAttestationSupported(): Promise<boolean>;\n  generateHardwareAttestedKey(keyAlias: string, challenge: string): Promise<void>;\n  getAttestationCertificateChain(keyAlias: string): Promise<string[]>;\n}\n"]}

package/expo-module.config.json

@@ -8,7 +8,7 @@
     "publication": {
       "groupId": "expo.modules.integrity",
       "artifactId": "expo.modules.integrity",
-      "version": "0.1.7",
+      "version": "0.1.8",
       "repository": "local-maven-repo"
     }
   }

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8-sources.jar.md5

@@ -0,0 +1 @@
+bd471f1dcf69cbbf5e0172fbeb373e6c

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8-sources.jar.sha1

@@ -0,0 +1 @@
+a2399da6fd22e38235efc0fef9964cf964c2281d

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8-sources.jar.sha256

@@ -0,0 +1 @@
+4512f979829d433bf955ed04bb4f0014fa6c9987c978fe562db52c28f8dd7be9

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8-sources.jar.sha512

@@ -0,0 +1 @@
+5e6df019863896ddafc74e3114f2466d769e0775de771210764692d8c577010695cdf5a38619c1a794c3956da11e075bc6ca96f20a7dacb5ceaefe4b5a8012d7

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8.aar.md5

@@ -0,0 +1 @@
+81536bd1d244aedaf579b11d9568c935

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8.aar.sha1

@@ -0,0 +1 @@
+b2a3cd60cb041d2cd7c82dbbefbe7d0b1e99de3a

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8.aar.sha256

@@ -0,0 +1 @@
+4a28e10d4bcb28e2da698e3cc8802e533b44834a06fbdda7f20ff535e6dfb647

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8.aar.sha512

@@ -0,0 +1 @@
+fca74a314c0a20e21ff5363776c85b2e33f616199820c6600f2a750eff749a15b5398da2e55fb8d314a0ae7b0d63c9c2353bbe031691d5544a573b724c207f39

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/{0.1.7/expo.modules.integrity-0.1.7.module → 0.1.8/expo.modules.integrity-0.1.8.module}

@@ -3,7 +3,7 @@
   "component": {
     "group": "expo.modules.integrity",
     "module": "expo.modules.integrity",
-    "version": "0.1.7",
+    "version": "0.1.8",
     "attributes": {
       "org.gradle.status": "release"
     }
@@ -24,13 +24,13 @@
       },
       "files": [
         {
-          "name": "expo.modules.integrity-0.1.7.aar",
-          "url": "expo.modules.integrity-0.1.7.aar",
-          "size": 20823,
-          "sha512": "0f4cf0eb749bce9e1385bff59258369ebca662007986e457d571a0bb6b8622b8a4ab2613d90988c50cce5ec448e0a8ee640b7df7b22d8161cb57437331c6ecde",
-          "sha256": "7d66543f5aede006f25c4aa24efeeffcde047cefd67dd953e3685d771bc5496a",
-          "sha1": "a96cd645ab0b10555782a08cce606a76e23b6140",
-          "md5": "b5a97dd5a1bcb837ab8f5732e4d63b51"
+          "name": "expo.modules.integrity-0.1.8.aar",
+          "url": "expo.modules.integrity-0.1.8.aar",
+          "size": 31554,
+          "sha512": "fca74a314c0a20e21ff5363776c85b2e33f616199820c6600f2a750eff749a15b5398da2e55fb8d314a0ae7b0d63c9c2353bbe031691d5544a573b724c207f39",
+          "sha256": "4a28e10d4bcb28e2da698e3cc8802e533b44834a06fbdda7f20ff535e6dfb647",
+          "sha1": "b2a3cd60cb041d2cd7c82dbbefbe7d0b1e99de3a",
+          "md5": "81536bd1d244aedaf579b11d9568c935"
         }
       ]
     },
@@ -60,13 +60,13 @@
       ],
       "files": [
         {
-          "name": "expo.modules.integrity-0.1.7.aar",
-          "url": "expo.modules.integrity-0.1.7.aar",
-          "size": 20823,
-          "sha512": "0f4cf0eb749bce9e1385bff59258369ebca662007986e457d571a0bb6b8622b8a4ab2613d90988c50cce5ec448e0a8ee640b7df7b22d8161cb57437331c6ecde",
-          "sha256": "7d66543f5aede006f25c4aa24efeeffcde047cefd67dd953e3685d771bc5496a",
-          "sha1": "a96cd645ab0b10555782a08cce606a76e23b6140",
-          "md5": "b5a97dd5a1bcb837ab8f5732e4d63b51"
+          "name": "expo.modules.integrity-0.1.8.aar",
+          "url": "expo.modules.integrity-0.1.8.aar",
+          "size": 31554,
+          "sha512": "fca74a314c0a20e21ff5363776c85b2e33f616199820c6600f2a750eff749a15b5398da2e55fb8d314a0ae7b0d63c9c2353bbe031691d5544a573b724c207f39",
+          "sha256": "4a28e10d4bcb28e2da698e3cc8802e533b44834a06fbdda7f20ff535e6dfb647",
+          "sha1": "b2a3cd60cb041d2cd7c82dbbefbe7d0b1e99de3a",
+          "md5": "81536bd1d244aedaf579b11d9568c935"
         }
       ]
     },
@@ -80,13 +80,13 @@
       },
       "files": [
         {
-          "name": "expo.modules.integrity-0.1.7-sources.jar",
-          "url": "expo.modules.integrity-0.1.7-sources.jar",
-          "size": 3403,
-          "sha512": "e7f267cc0787ef413c398cffe83b2370eeb304fa1f19dca189e903c71b1946926f9814b0aef36ff36d7c82436e95c5e26230c47a97fc2bf79b4b5146978fe663",
-          "sha256": "9b7e44c18df40296e89ec111fd1093841c27a50d2dd6f9d8db9a0a7bf810eef7",
-          "sha1": "41cda41cb0b43ddb0bea3c5b5b283490346a62dc",
-          "md5": "594e9d7dac41e6c828b54d0afaf12267"
+          "name": "expo.modules.integrity-0.1.8-sources.jar",
+          "url": "expo.modules.integrity-0.1.8-sources.jar",
+          "size": 4420,
+          "sha512": "5e6df019863896ddafc74e3114f2466d769e0775de771210764692d8c577010695cdf5a38619c1a794c3956da11e075bc6ca96f20a7dacb5ceaefe4b5a8012d7",
+          "sha256": "4512f979829d433bf955ed04bb4f0014fa6c9987c978fe562db52c28f8dd7be9",
+          "sha1": "a2399da6fd22e38235efc0fef9964cf964c2281d",
+          "md5": "bd471f1dcf69cbbf5e0172fbeb373e6c"
         }
       ]
     }

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8.module.md5

@@ -0,0 +1 @@
+d629ac616f5663ed713e436784a6fb7f

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8.module.sha1

@@ -0,0 +1 @@
+35926ca77d11a15d9a667d191cfd690ac50da7fe

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8.module.sha256

@@ -0,0 +1 @@
+b769157ae3f102be63f135c176224fbef92d00e5c2e755bbafeb6ca8d41b6fa8

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8.module.sha512

@@ -0,0 +1 @@
+10d73c6fd4fe18bc36898aacab3b82b313010a68e8efc5bc20ef3604b47338eb3ae2da967a752f93a94e0ffad6255fc27c17817da047d43b9f29e0df3c065761

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/{0.1.7/expo.modules.integrity-0.1.7.pom → 0.1.8/expo.modules.integrity-0.1.8.pom}

@@ -9,7 +9,7 @@
   <modelVersion>4.0.0</modelVersion>
   <groupId>expo.modules.integrity</groupId>
   <artifactId>expo.modules.integrity</artifactId>
-  <version>0.1.7</version>
+  <version>0.1.8</version>
   <packaging>aar</packaging>
   <name>expo.modules.integrity</name>
   <url>https://github.com/expo/expo</url>

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8.pom.md5

@@ -0,0 +1 @@
+1b9193a03e018270dc9b45d0cb71139e

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8.pom.sha1

@@ -0,0 +1 @@
+bd1f4b112519ed5b2b81418743c6ea40fbc07e30

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8.pom.sha256

@@ -0,0 +1 @@
+e3edba75a1e9dab1178485f97d3b02ecd91fc32f3fae50d28e9f1458dce4c037

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.8/expo.modules.integrity-0.1.8.pom.sha512

@@ -0,0 +1 @@
+6061cc361102a13342f46463efe5c884e5a7ace3c8f260e025b6448670b1fb5f1f1c046f8ed15cd6de7e9f881ff7f60576e3b2c563bcd2e60c522b4ac2be5ea6

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/maven-metadata.xml

@@ -3,11 +3,11 @@
   <groupId>expo.modules.integrity</groupId>
   <artifactId>expo.modules.integrity</artifactId>
   <versioning>
-    <latest>0.1.7</latest>
-    <release>0.1.7</release>
+    <latest>0.1.8</latest>
+    <release>0.1.8</release>
     <versions>
-      <version>0.1.7</version>
+      <version>0.1.8</version>
     </versions>
-    <lastUpdated>20250911202149</lastUpdated>
+    <lastUpdated>20250922222655</lastUpdated>
   </versioning>
 </metadata>

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/maven-metadata.xml.md5

@@ -1 +1 @@
-d8e96b785261790c00c476772d97d33c
+4c3898dd0933ddd5314d2157e1cfb91b

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/maven-metadata.xml.sha1

@@ -1 +1 @@
-27633613e44e18cf9cea66b187e575d52d5697da
+1b6363aa8512931d1055661ca7f18db4da34675b

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/maven-metadata.xml.sha256

@@ -1 +1 @@
-f0d80100a5fca156ec16dec707a157cad05ee47f6a3d1f1c85e257905aa6f452
+e2bca5909006e51d4ef6db8943d091fbd2f0b864b62d53beac65682d29904379

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/maven-metadata.xml.sha512

@@ -1 +1 @@
-8ee841503bb9bb1aa49651509dab1db6830f4df8c16a389a235a6bd62a7a3d0e2e08b70b9eb290cbda10db7c4ac7a643c3505562be57e0df1dd1af6698015c2d
+30693db782e032d466d29cff1bdf54ca1f08bf60cca1bc689f91b6ecc51bf5c09fab416a8456fd7cc8631068dba2233479a2090bbf8db4bcb40003e8209f814f

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@expo/app-integrity",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "A native module that helps assert app integrity on mobile platforms",
   "sideEffects": false,
   "main": "build/index.js",
@@ -43,5 +43,5 @@
     "expo": "*",
     "react-native": "*"
   },
-  "gitHead": "088e79428be97cf3ee11fc93e0e5a1fc1c8bea1e"
+  "gitHead": "6523053d0d997d2a21f580d2752b2f873c122038"
 }

package/src/AppIntegrity.ts

@@ -74,3 +74,44 @@ export async function requestIntegrityCheck(requestHash: string) {
   }
   return ExpoAppIntegrity.requestIntegrityCheck(requestHash);
 }
+
+/**
+ * Checks if hardware attestation is supported on this device.
+ * @return A Promise that is fulfilled with a boolean indicating support.
+ * @platform android
+ */
+export async function isHardwareAttestationSupported() {
+  if (Platform.OS !== 'android') {
+    return false;
+  }
+  return ExpoAppIntegrity.isHardwareAttestationSupported();
+}
+
+/**
+ * Generates a hardware-attested key pair in the Android Keystore.
+ * This key can be used for attestation on GrapheneOS and other secure Android distributions.
+ * @param keyAlias A unique identifier for the key.
+ * @param challenge A challenge string from your server.
+ * @return A Promise that resolves when the key is generated successfully.
+ * @platform android
+ */
+export async function generateHardwareAttestedKey(keyAlias: string, challenge: string) {
+  if (Platform.OS !== 'android') {
+    throw new Error('generateHardwareAttestedKey is only available on Android');
+  }
+  return ExpoAppIntegrity.generateHardwareAttestedKey(keyAlias, challenge);
+}
+
+/**
+ * Retrieves the attestation certificate chain for a hardware-attested key.
+ * The certificate chain can be validated on your server to verify device integrity.
+ * @param keyAlias The identifier of the key to get certificates for.
+ * @return A Promise that is fulfilled with an array of base64-encoded X.509 certificates.
+ * @platform android
+ */
+export async function getAttestationCertificateChain(keyAlias: string) {
+  if (Platform.OS !== 'android') {
+    throw new Error('getAttestationCertificateChain is only available on Android');
+  }
+  return ExpoAppIntegrity.getAttestationCertificateChain(keyAlias);
+}

package/src/ExpoAppIntegrity.types.ts

@@ -9,7 +9,11 @@ export interface ExpoAppIntegrityModule extends NativeModule {
   generateKey(): Promise<string>;
   attestKey(keyId: string, challenge: string): Promise<string>;
   generateAssertion(keyId: string, challenge: string): Promise<string>;
-  // Android
+  // Android - Play Integrity
   prepareIntegrityTokenProvider(cloudProjectNumber: string): Promise<void>;
   requestIntegrityCheck(requestHash: string): Promise<string>;
+  // Android - Hardware Attestation
+  isHardwareAttestationSupported(): Promise<boolean>;
+  generateHardwareAttestedKey(keyAlias: string, challenge: string): Promise<void>;
+  getAttestationCertificateChain(keyAlias: string): Promise<string[]>;
 }

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7-sources.jar.md5

@@ -1 +0,0 @@
-594e9d7dac41e6c828b54d0afaf12267

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7-sources.jar.sha1

@@ -1 +0,0 @@
-41cda41cb0b43ddb0bea3c5b5b283490346a62dc

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7-sources.jar.sha256

@@ -1 +0,0 @@
-9b7e44c18df40296e89ec111fd1093841c27a50d2dd6f9d8db9a0a7bf810eef7

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7-sources.jar.sha512

@@ -1 +0,0 @@
-e7f267cc0787ef413c398cffe83b2370eeb304fa1f19dca189e903c71b1946926f9814b0aef36ff36d7c82436e95c5e26230c47a97fc2bf79b4b5146978fe663

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7.aar.md5

@@ -1 +0,0 @@
-b5a97dd5a1bcb837ab8f5732e4d63b51

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7.aar.sha1

@@ -1 +0,0 @@
-a96cd645ab0b10555782a08cce606a76e23b6140

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7.aar.sha256

@@ -1 +0,0 @@
-7d66543f5aede006f25c4aa24efeeffcde047cefd67dd953e3685d771bc5496a

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7.aar.sha512

@@ -1 +0,0 @@
-0f4cf0eb749bce9e1385bff59258369ebca662007986e457d571a0bb6b8622b8a4ab2613d90988c50cce5ec448e0a8ee640b7df7b22d8161cb57437331c6ecde

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7.module.md5

@@ -1 +0,0 @@
-786be0760724f6179efbd145dc9481dd

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7.module.sha1

@@ -1 +0,0 @@
-8177e17169da4923707b33ddd915c2246c90a400

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7.module.sha256

@@ -1 +0,0 @@
-8caac8e8b29812068266be62fc2cb287c3b0b1a97c64cd901944385ec60e8899

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7.module.sha512

@@ -1 +0,0 @@
-bf5e188132d9014733c92b2bad43eb025c92696b3d218b3fb501b482046f325c7711cdaf5db089fc06c93bd5d76006e426c29bb318eee397d297819a46dc1df9

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7.pom.md5

@@ -1 +0,0 @@
-be1116c5b5f1a5988a252eb1e4e8d0ec

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7.pom.sha1

@@ -1 +0,0 @@
-2312288fcc9a92e1cdd3024c4414e4935a3e7e3d

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7.pom.sha256

@@ -1 +0,0 @@
-68200f2af56afa76fa0d9c19bc95dc8c209d4cc88a531df57cffa1d49988cef4

package/local-maven-repo/expo/modules/integrity/expo.modules.integrity/0.1.7/expo.modules.integrity-0.1.7.pom.sha512

@@ -1 +0,0 @@
-4dcbc1f9c15289ed6889f7c89cdc4353413554729662084c2abbe2efe0bc2a5b82222d5beadcc9a82eccbc4e913022a8684cc0a7e3a7d2bc49ad6ded885f617a