@icedevml/react-native-host-card-emulation 0.3.0 → 0.4.1

package/README.md

@@ -23,7 +23,17 @@ Make sure that your project has it enabled. Note that the New Architecture is en
 *(no prerequisite steps are required for Android)*
 
 ## Installation
-Install `@icedevml/react-native-host-card-emulation` package within your React Native project. Then, follow the subsections below for each platform that you need to support.
+Install this package within your React Native project:
+
+```
+yarn add @icedevml/react-native-host-card-emulation
+```
+or using npm
+```
+npm install --save @icedevml/react-native-host-card-emulation
+```
+
+Afterwards, follow the subsections below for each platform that you need to support.
 
 ### iOS
 1. Make sure to set up a proper signing team and bundle identifier in "Signing & Capabilities" configuration section of your project.
@@ -54,7 +64,9 @@ Install `@icedevml/react-native-host-card-emulation` package within your React N
       ...
 
    +  <uses-permission android:name="android.permission.NFC" />
-   +  <uses-feature android:name="android.hardware.nfc.hce" android:required="true" />
+   +  <uses-feature android:name="android.hardware.nfc.hce" android:required="false" />
+   +  <permission android:name="com.itsecrnd.rtnhceandroid.HCE_BROADCAST" android:protectionLevel="signature" />
+   +  <uses-permission android:name="com.itsecrnd.rtnhceandroid.HCE_BROADCAST"/>
 
       ...
 
@@ -65,10 +77,10 @@ Install `@icedevml/react-native-host-card-emulation` package within your React N
         ...
    
    +    <service
-   +      android:name="com.itsecrnd.rtnhceandroid.HCEService"
+   +      android:name="com.itsecrnd.rtnhceandroid.service.HCEService"
    +      android:exported="true"
-   +      android:enabled="false"
-   +      android:permission="android.permission.BIND_NFC_SERVICE" >
+   +      android:enabled="true"
+   +      android:permission="android.permission.BIND_NFC_SERVICE">
    +      <intent-filter>
    +        <action android:name="android.nfc.cardemulation.action.HOST_APDU_SERVICE" />
    +        <category android:name="android.intent.category.DEFAULT"/>
@@ -98,5 +110,92 @@ Install `@icedevml/react-native-host-card-emulation` package within your React N
 
 ## API Specification & Demo App
 
-* [module API (declarations)](https://github.com/icedevml/react-native-host-card-emulation/blob/master/packages/native-hce-module/js/NativeHCEModule.ts)
-* [demo app's code (example usage)](https://github.com/icedevml/react-native-host-card-emulation/blob/master/packages/demo-hce-module-app/App.tsx)
+This module provides a uniform low-level HCE API for both mobile platforms.
+
+> [!NOTE]
+> Raw native module's API specification is available in [packages/native-hce-module/js/NativeHCEModule.ts](https://github.com/icedevml/react-native-host-card-emulation/blob/master/packages/native-hce-module/js/NativeHCEModule.ts).
+> Check it out in order to understand what methods you can call against the module and what are the expected parameters/return values.
+
+> [!NOTE]
+> See [Demo App's Code (Example Library Usage)](https://github.com/icedevml/react-native-host-card-emulation/blob/master/packages/demo-hce-module-app/App.tsx) example for more insignt about the library's API.
+
+### Quick start guide
+
+1. Subscribe to the event stream. There is a single global event stream, so you can subscribe early and remain subscribed to events for the entire application's lifetime.
+   ```typescript
+   useEffect(() => {
+       const removeListener = NativeHCEModule?.onEvent(async (event: HCEModuleEvent) => {
+           switch (event.type) {
+               /* ... implement event handlers here ... */
+           }
+       });
+
+       // cleanup the event listener when the effect is unmounted
+       return () => {
+           removeListener();
+       }
+   }, []);
+   ```
+2. When user indicates that he/she wants to perform the HCE action, call the following function from the button's onClick routine:
+   ```typescript
+   await NativeHCEModule?.beginSession();
+   ```
+   This will emit `sessionStarted` event right after the function call, on both iOS and Android platforms. After the session is started, you can decide to start HCE emulation right away in the event handler:
+   ```typescript
+   // inside NativeHCEModule?.onEvent handler's switch
+   case 'sessionStarted':
+       NativeHCEModule?.setSessionAlertMessage('Tap towards the reader');  // only for iOS, no-op in Android
+       await NativeHCEModule?.startHCE();
+       break;
+   ```
+   Calling `await NativeHCEModule?.startHCE()` causes:
+   * iOS: Your smartphone will start listening for C-APDUs (Command APDUs originating from reader devices) right after that function is called, which will be additionally indicated by the operating system popping out the NFC scanning user interface prompt.
+   * Android: HCE commands will be forwarded to your application from that point on. No specific user interface is displayed (you have to implement it on your own, within your app).
+3. Optionally, you can handle `readerDetected` and `readerDeselected` events to enhance user's experience.
+   ```typescript
+   // inside NativeHCEModule?.onEvent handler's switch
+   case 'readerDetected':
+       NativeHCEModule?.setSessionAlertMessage('Reader detected');  // only for iOS, no-op in Android
+       break;
+
+    case 'readerDeselected':
+        NativeHCEModule?.setSessionAlertMessage('Lost reader');  // only for iOS, no-op in Android
+        break;
+   ```
+   For those events, trigger mechanisms are platform dependent:
+   * iOS: The `readerDetected` event will be emitted as soon as the NFC tag field presence is observed. The `readerDeselected` event will be emitted if the reader is physically disconnected or a non-matching AID is selected by the reader.
+   * Android: The `readerDetected` event will be emitted as soon as the first matching SELECT AID command is observed. The `readerDeselected` event will be emitted if the reader is physically disconnected or a non-matching AID is selected by the reader.
+4. Receive incoming C-APDU and respond to it:
+   ```typescript
+   // inside NativeHCEModule?.onEvent handler's switch
+   case 'received':
+       NativeHCEModule?.setSessionAlertMessage('Keep holding the tag');  // only for iOS, no-op on Android
+
+       // decode incoming C-APDU to bytes
+       const capdu = Buffer.from(event.arg!, 'hex');
+       console.log('Received C-APDU, capdu.toString('hex'));
+   
+       // for the demo purposes, we always want to respond with [0x0A] + status code 0x9000 (success)
+       await NativeHCEModule?.respondAPDU(Buffer.from([0x0A, 0x90, 0x00], "hex"));
+       break;
+   ```
+   You don't have to respond to the APDU right away from within the event handler, but please remember that the reader might time out if you will be lingering with the response for too long.
+
+### iOS: Acquiring exclusive NFC access
+If you need to utilize `NFCPresentmentIntentAssertion` for enhanced user experience, call:
+```typescript
+NativeHCEModule?.acquireExclusiveNFC();
+```
+This function will acquire an exclusive NFC access for 15 seconds. On system services or other applications will be able to interfere with NFC during that period. For example, the NFC background tag reading will be disabled so it would not generate any distracting notifications.
+
+This function will throw an exception if:
+* the presentment intent assertion was already acquired and is still active;
+* you are in the cooldown period where you are not allowed to acquire the presentment intent assertion (cooldown is 15 seconds after the previous assertion had expired);
+* the feature is not supported or the device is not eligible for whatever reason;
+
+Call `NativeHCEModule?.isExclusiveNFC()` to check if exclusive NFC access is still active.
+
+### More resources
+
+* [Module's API specification](https://github.com/icedevml/react-native-host-card-emulation/blob/master/packages/native-hce-module/js/NativeHCEModule.ts)
+* [Demo App's Code (Example Library Usage)](https://github.com/icedevml/react-native-host-card-emulation/blob/master/packages/demo-hce-module-app/App.tsx)

package/android/src/main/java/com/itsecrnd/rtnhceandroid/IntentKeys.java

@@ -1,8 +1,11 @@
 package com.itsecrnd.rtnhceandroid;
 
 public class IntentKeys {
-    public static final String INTENT_RECEIVE_C_APDU = "com.itsecrnd.rtnhceandroid.receivecapdu";
-    public static final String INTENT_SEND_R_APDU = "com.itsecrnd.rtnhceandroid.sendrapdu";
-    public static final String INTENT_READER_DETECT = "com.itsecrnd.rtnhceandroid.readerdetect";
-    public static final String INTENT_READER_LOST = "com.itsecrnd.rtnhceandroid.readerlost";
+    public static final String PERMISSION_HCE_BROADCAST = "com.itsecrnd.rtnhceandroid.HCE_BROADCAST";
+    public static final String ACTION_RECEIVE_C_APDU = "com.itsecrnd.rtnhceandroid.ACTION_RECEIVE_C_APDU";
+    public static final String ACTION_SEND_R_APDU = "com.itsecrnd.rtnhceandroid.ACTION_SEND_R_APDU";
+    public static final String ACTION_READER_DETECT = "com.itsecrnd.rtnhceandroid.ACTION_READER_DETECT";
+    public static final String ACTION_READER_LOST = "com.itsecrnd.rtnhceandroid.ACTION_READER_LOST";
+    public static final String KEY_CAPDU = "capdu";
+    public static final String KEY_RAPDU = "rapdu";
 }

package/android/src/main/java/com/itsecrnd/rtnhceandroid/RTNHCEAndroidModule.java

@@ -1,13 +1,13 @@
 package com.itsecrnd.rtnhceandroid;
 
 import static android.content.Context.RECEIVER_EXPORTED;
-import static com.itsecrnd.rtnhceandroid.IntentKeys.INTENT_READER_DETECT;
-import static com.itsecrnd.rtnhceandroid.IntentKeys.INTENT_READER_LOST;
-import static com.itsecrnd.rtnhceandroid.IntentKeys.INTENT_RECEIVE_C_APDU;
-import static com.itsecrnd.rtnhceandroid.IntentKeys.INTENT_SEND_R_APDU;
+import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_READER_DETECT;
+import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_READER_LOST;
+import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_RECEIVE_C_APDU;
+import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_SEND_R_APDU;
+import static com.itsecrnd.rtnhceandroid.IntentKeys.PERMISSION_HCE_BROADCAST;
 
 import android.content.BroadcastReceiver;
-import android.content.ComponentName;
 import android.content.Context;
 import android.content.Intent;
 import android.content.IntentFilter;
@@ -23,27 +23,14 @@ import com.facebook.react.bridge.Promise;
 import com.facebook.react.bridge.ReactApplicationContext;
 import com.facebook.react.bridge.WritableMap;
 
-import javax.crypto.SecretKey;
-
-@RequiresApi(api = Build.VERSION_CODES.TIRAMISU)
 public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
     public static final String TAG = "RTNHCEAndroidModule";
     public static final String NAME = "NativeHCEModule";
 
-    private final SecretKey encSecretKey;
-    private boolean sessionOpen;
-
-    private void toggleHceService(Boolean enabled) {
-        getReactApplicationContext()
-                .getPackageManager()
-                .setComponentEnabledSetting(
-                        new ComponentName(getReactApplicationContext(), HCEService.class),
-                        enabled
-                                ? PackageManager.COMPONENT_ENABLED_STATE_ENABLED
-                                : PackageManager.COMPONENT_ENABLED_STATE_DISABLED,
-                        PackageManager.DONT_KILL_APP
-                );
-    }
+    private volatile boolean sessionRunning;
+    private volatile boolean hceRunning;
+    private volatile boolean hceBreakConnection;
+    private volatile boolean hceDeselected;
 
     private void sendEvent(final String type, final String arg) {
         WritableMap map = Arguments.createMap();
@@ -52,23 +39,46 @@ public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
         emitOnEvent(map);
     }
 
+    @RequiresApi(api = Build.VERSION_CODES.TIRAMISU)
     private final BroadcastReceiver receiver = new BroadcastReceiver() {
         @Override
         public void onReceive(Context context, Intent intent) {
             try {
                 String action = intent.getAction();
 
-                if (action != null) {
-                    AESGCMUtil.decryptData(encSecretKey, intent.getStringExtra("auth"));
+                if (action == null) {
+                    Log.w(TAG, "Received intent with null action in module receiver.");
+                    return;
+                }
 
-                    if (action.equals(INTENT_RECEIVE_C_APDU)) {
-                        String capdu = AESGCMUtil.decryptData(encSecretKey, intent.getStringExtra("capdu"));
+                if (action.equals(ACTION_RECEIVE_C_APDU)) {
+                    String capdu = intent.getStringExtra("capdu");
+
+                    if (!hceBreakConnection && hceRunning) {
                         sendEvent("received", capdu);
-                    } else if (action.equals(INTENT_READER_DETECT)) {
+                    } else {
+                        // HCE is already disabled or was just disabled while the HCEService was running
+                        // don't forward C-APDUs to the application and just respond 6999 to everything
+                        Intent rintent = new Intent(ACTION_SEND_R_APDU);
+                        rintent.setPackage(getReactApplicationContext().getPackageName());
+                        rintent.putExtra("rapdu", "6999");
+                        getReactApplicationContext().getApplicationContext().sendBroadcast(rintent, PERMISSION_HCE_BROADCAST);
+                    }
+                } else if (action.equals(ACTION_READER_DETECT)) {
+                    if (hceRunning) {
+                        hceDeselected = false;
                         sendEvent("readerDetected", "");
-                    } else if (action.equals(INTENT_READER_LOST)) {
+                    }
+                } else if (action.equals(ACTION_READER_LOST)) {
+                    if (hceRunning && !hceBreakConnection && !hceDeselected) {
+                        // only if we haven't send a fake disconnect event already
+                        hceDeselected = true;
                         sendEvent("readerDeselected", "");
                     }
+
+                    hceBreakConnection = false;
+                } else {
+                    Log.w(TAG, "Received unknown action intent in module receiver: " + action);
                 }
             } catch (Exception e) {
                 Log.e(TAG, "Failed to handle broadcast in RTNHCEAndroidModule.", e);
@@ -79,40 +89,32 @@ public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
     RTNHCEAndroidModule(ReactApplicationContext context) {
         super(context);
 
-        this.sessionOpen = false;
-
-        String encKey;
-
-        try {
-            encSecretKey = AESGCMUtil.generateKey();
-            encKey = BinaryUtils.ByteArrayToHexString(encSecretKey.getEncoded());
-        } catch (Exception e) {
-            throw new RuntimeException("Failed to generate encryption key.", e);
+        this.sessionRunning = false;
+        this.hceRunning = false;
+        this.hceBreakConnection = false;
+        this.hceDeselected = true;
+
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.TIRAMISU) {
+            IntentFilter filter = new IntentFilter();
+            filter.addAction(ACTION_RECEIVE_C_APDU);
+            filter.addAction(ACTION_READER_DETECT);
+            filter.addAction(ACTION_READER_LOST);
+
+            getReactApplicationContext().getApplicationContext().registerReceiver(
+                    receiver,
+                    filter,
+                    PERMISSION_HCE_BROADCAST,
+                    null,
+                    RECEIVER_EXPORTED
+            );
         }
+    }
 
-        String prefsName = getReactApplicationContext().getPackageName() + ".nativehcemodule";
-        getReactApplicationContext()
-                .getSharedPreferences(prefsName, Context.MODE_PRIVATE)
-                .edit()
-                .putString("encKey", encKey)
-                .commit();
-
-        IntentFilter filter = new IntentFilter();
-        filter.addAction(INTENT_RECEIVE_C_APDU);
-        filter.addAction(INTENT_READER_DETECT);
-        filter.addAction(INTENT_READER_LOST);
-
-        /*
-         * FIXME It seems like those intents are not going through across this module and HostApduService.
-         * This happens even though those things are within the same application and package.
-         * It also seems like there is no way to bind HostApduService (or it's a skill issue).
-         *
-         * For now we will just encrypt&authenticate all messages using AES/GCM and use exported
-         * receivers. This is not a perfect solution but it is going to be secure and sufficient for now.
-         *
-         * If somebody knows a better way then any pull requests would be greatly appreciated.
-         */
-        getReactApplicationContext().getApplicationContext().registerReceiver(receiver, filter, RECEIVER_EXPORTED);
+    @Override
+    public void invalidate() {
+        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.TIRAMISU) {
+            getReactApplicationContext().getApplicationContext().unregisterReceiver(receiver);
+        }
     }
 
     @Override
@@ -123,9 +125,13 @@ public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
 
     @Override
     public boolean isPlatformSupported() {
+        if (Build.VERSION.SDK_INT < Build.VERSION_CODES.TIRAMISU) {
+            return false;
+        }
+
         PackageManager pm = getReactApplicationContext().getPackageManager();
         return pm.hasSystemFeature(PackageManager.FEATURE_NFC)
-            && pm.hasSystemFeature(PackageManager.FEATURE_NFC_HOST_CARD_EMULATION);
+                && pm.hasSystemFeature(PackageManager.FEATURE_NFC_HOST_CARD_EMULATION);
     }
 
     @Override
@@ -135,18 +141,23 @@ public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
 
     @Override
     public boolean isExclusiveNFC() {
-        // unsupported on Android
+        // unsupported on Android, always false
         return false;
     }
 
     @Override
     public void beginSession(Promise promise) {
-        if (this.sessionOpen) {
-            promise.reject("err_card_session_exists", "Session already exists.");
-        } else {
-            this.sessionOpen = true;
-            promise.resolve(null);
+        if (!isPlatformSupported()) {
+            promise.reject("err_platform_unsupported", "Unsupported Android version or missing NFC/HCE feature.");
+            return;
+        }
+
+        if (!this.sessionRunning) {
+            this.sessionRunning = true;
             sendEvent("sessionStarted", "");
+            promise.resolve(null);
+        } else {
+            promise.reject("err_card_session_exists", "Session already exists.");
         }
     }
 
@@ -157,51 +168,74 @@ public class RTNHCEAndroidModule extends NativeHCEModuleSpec {
 
     @Override
     public void invalidateSession() {
-        toggleHceService(false);
-        this.sessionOpen = false;
-        sendEvent("sessionInvalidated", "");
+        if (this.sessionRunning) {
+            this.sessionRunning = false;
+            sendEvent("sessionInvalidated", "userInvalidated");
+        }
     }
 
     @Override
     public boolean isSessionRunning() {
-        return this.sessionOpen;
+        return this.sessionRunning;
     }
 
     @Override
     public void startHCE(Promise promise) {
-        toggleHceService(true);
+        if (!this.sessionRunning) {
+            promise.reject("err_no_session", "No session is active.");
+            return;
+        }
+
+        if (this.hceRunning) {
+            promise.reject("err_start_emulation", "Error trying to start emulation. Emulation already started.");
+            return;
+        }
+
+        this.hceRunning = true;
         promise.resolve(null);
     }
 
     @Override
     public void stopHCE(String status, Promise promise) {
-        toggleHceService(false);
+        if (!this.sessionRunning) {
+            promise.reject("err_no_session", "No session is active.");
+            return;
+        }
+
+        if (this.hceRunning) {
+            this.hceRunning = false;
+
+            if (!this.hceDeselected) {
+                this.hceDeselected = true;
+                this.hceBreakConnection = true;
+                sendEvent("readerDeselected", "");
+            }
+        }
+
         promise.resolve(null);
     }
 
+    @RequiresApi(api = Build.VERSION_CODES.TIRAMISU)
     @Override
     public void respondAPDU(String rapdu, Promise promise) {
-        if (!this.sessionOpen) {
+        if (!this.sessionRunning) {
+            promise.reject("err_no_session", "No session is active.");
+            return;
+        } else if (!this.hceRunning) {
+            promise.reject("err_no_hce", "HCE is not running.");
             return;
         }
 
-        String encRapdu = AESGCMUtil.encryptData(encSecretKey, rapdu);
-
-        Intent intent = new Intent(INTENT_SEND_R_APDU);
+        Intent intent = new Intent(ACTION_SEND_R_APDU);
         intent.setPackage(getReactApplicationContext().getPackageName());
-        intent.putExtra("auth", AESGCMUtil.encryptData(encSecretKey, AESGCMUtil.randomString()));
-        intent.putExtra("rapdu", encRapdu);
-        getReactApplicationContext().getApplicationContext().sendBroadcast(intent);
+        intent.putExtra("rapdu", rapdu);
+        getReactApplicationContext().getApplicationContext().sendBroadcast(intent, PERMISSION_HCE_BROADCAST);
 
         promise.resolve(null);
     }
 
     @Override
     public void isHCERunning(Promise promise) {
-        int enabledSetting = getReactApplicationContext()
-                .getPackageManager()
-                .getComponentEnabledSetting(new ComponentName(getReactApplicationContext(), HCEService.class));
-
-        promise.resolve(enabledSetting == PackageManager.COMPONENT_ENABLED_STATE_ENABLED);
+        promise.resolve(this.hceRunning);
     }
 }

package/android/src/main/java/com/itsecrnd/rtnhceandroid/RTNHCEAndroidPackage.java

@@ -1,9 +1,6 @@
 package com.itsecrnd.rtnhceandroid;
 
-import android.os.Build;
-
 import androidx.annotation.Nullable;
-import androidx.annotation.RequiresApi;
 
 import com.facebook.react.TurboReactPackage;
 import com.facebook.react.bridge.NativeModule;
@@ -14,7 +11,6 @@ import com.facebook.react.module.model.ReactModuleInfoProvider;
 import java.util.HashMap;
 import java.util.Map;
 
-@RequiresApi(api = Build.VERSION_CODES.TIRAMISU)
 public class RTNHCEAndroidPackage extends TurboReactPackage {
     @Nullable
     @Override

package/android/src/main/java/com/itsecrnd/rtnhceandroid/service/HCEService.java

@@ -0,0 +1,90 @@
+package com.itsecrnd.rtnhceandroid.service;
+
+import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_READER_DETECT;
+import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_READER_LOST;
+import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_RECEIVE_C_APDU;
+import static com.itsecrnd.rtnhceandroid.IntentKeys.ACTION_SEND_R_APDU;
+import static com.itsecrnd.rtnhceandroid.IntentKeys.KEY_CAPDU;
+import static com.itsecrnd.rtnhceandroid.IntentKeys.KEY_RAPDU;
+import static com.itsecrnd.rtnhceandroid.IntentKeys.PERMISSION_HCE_BROADCAST;
+
+import android.content.BroadcastReceiver;
+import android.content.Context;
+import android.content.Intent;
+import android.content.IntentFilter;
+import android.nfc.cardemulation.HostApduService;
+import android.os.Build;
+import android.os.Bundle;
+import android.util.Log;
+
+import androidx.annotation.RequiresApi;
+
+import com.itsecrnd.rtnhceandroid.util.BinaryUtils;
+
+import java.util.Locale;
+
+@RequiresApi(api = Build.VERSION_CODES.TIRAMISU)
+public class HCEService extends HostApduService {
+    private static final String TAG = "HCEService";
+
+    private final BroadcastReceiver receiver = new BroadcastReceiver() {
+        @Override
+        public void onReceive(Context context, Intent intent) {
+            try {
+                String action = intent.getAction();
+
+                if (action != null && action.equals(ACTION_SEND_R_APDU)) {
+                    String rapdu = intent.getStringExtra(KEY_RAPDU);
+
+                    if (rapdu == null) {
+                        throw new RuntimeException("Bug! ACTION_SEND_RAPDU intent KEY_RAPDU is null.");
+                    }
+
+                    byte[] dec = BinaryUtils.HexStringToByteArray(rapdu.toUpperCase(Locale.ROOT));
+                    sendResponseApdu(dec);
+                } else {
+                    Log.w(TAG, "Received unknown action: " + action);
+                }
+            } catch (Exception e) {
+                Log.e(TAG, "Failed to handle broadcast in HCEService.", e);
+            }
+        }
+    };
+
+    @Override
+    public byte[] processCommandApdu(byte[] command, Bundle extras) {
+        String capdu = BinaryUtils.ByteArrayToHexString(command).toUpperCase(Locale.ROOT);
+
+        Intent intent = new Intent(ACTION_RECEIVE_C_APDU);
+        intent.setPackage(getApplicationContext().getPackageName());
+        intent.putExtra(KEY_CAPDU, capdu);
+        getApplicationContext().sendBroadcast(intent, PERMISSION_HCE_BROADCAST);
+
+        return null;
+    }
+
+    @Override
+    public void onCreate() {
+        Log.d(TAG, "HCEService onCreate");
+
+        IntentFilter filter = new IntentFilter();
+        filter.addAction(ACTION_SEND_R_APDU);
+        getApplicationContext().registerReceiver(
+                receiver, filter, PERMISSION_HCE_BROADCAST, null, RECEIVER_EXPORTED);
+
+        Intent intent = new Intent(ACTION_READER_DETECT);
+        intent.setPackage(getApplicationContext().getPackageName());
+        getApplicationContext().sendBroadcast(intent, PERMISSION_HCE_BROADCAST);
+    }
+
+    @Override
+    public void onDeactivated(int reason) {
+        Log.d(TAG, "HCEService onDeactivated: " + reason);
+
+        getApplicationContext().unregisterReceiver(receiver);
+
+        Intent intent = new Intent(ACTION_READER_LOST);
+        intent.setPackage(getApplicationContext().getPackageName());
+        getApplicationContext().sendBroadcast(intent, PERMISSION_HCE_BROADCAST);
+    }
+}

package/android/src/main/java/com/itsecrnd/rtnhceandroid/{BinaryUtils.java → util/BinaryUtils.java}

@@ -20,7 +20,7 @@
  *
  */
 
-package com.itsecrnd.rtnhceandroid;
+package com.itsecrnd.rtnhceandroid.util;
 
 public class BinaryUtils {
     /**

package/ios/RTNHCEModuleIOSImpl.swift

@@ -13,13 +13,8 @@ extension StringProtocol {
 }
 
 extension Data {
-  struct HexEncodingOptions: OptionSet {
-    let rawValue: Int
-    static let upperCase = HexEncodingOptions(rawValue: 1 << 0)
-  }
-
-  func hexEncodedString(options: HexEncodingOptions = []) -> String {
-    let format = options.contains(.upperCase) ? "%02hhX" : "%02hhx"
+  func hexEncodedString() -> String {
+    let format = "%02hhX"
     return map { String(format: format, $0) }.joined()
   }
 }
@@ -170,7 +165,14 @@ extension Data {
 
   @objc public func startHCE(resolve: @escaping RCTPromiseResolveBlock, reject: @escaping RCTPromiseRejectBlock) {
     Task.init {
-      try await self.cardSession?.startEmulation()
+      do {
+        try await self.cardSession?.startEmulation()
+      } catch(let error) {
+        reject("err_start_emulation", "Error trying to start emulation. \(error)", nil)
+        return
+      }
+
+      resolve(nil)
     }
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@icedevml/react-native-host-card-emulation",
-  "version": "0.3.0",
+  "version": "0.4.1",
   "description": "Host Card Emulation (HCE) React Native Turbo Module for iOS and Android platforms.",
   "react-native": "js/index",
   "source": "js/index",

package/android/src/main/java/com/itsecrnd/rtnhceandroid/AESGCMUtil.java

@@ -1,89 +0,0 @@
-package com.itsecrnd.rtnhceandroid;
-
-import android.annotation.SuppressLint;
-
-import java.nio.charset.StandardCharsets;
-import java.security.InvalidAlgorithmParameterException;
-import java.security.InvalidKeyException;
-import java.security.NoSuchAlgorithmException;
-import java.security.SecureRandom;
-import java.util.Base64;
-
-import javax.crypto.BadPaddingException;
-import javax.crypto.Cipher;
-import javax.crypto.IllegalBlockSizeException;
-import javax.crypto.KeyGenerator;
-import javax.crypto.NoSuchPaddingException;
-import javax.crypto.SecretKey;
-import javax.crypto.spec.GCMParameterSpec;
-
-@SuppressLint("NewApi")
-public class AESGCMUtil {
-    public static String randomString() {
-        byte[] rnd = new byte[32];
-        new SecureRandom().nextBytes(rnd);
-        return BinaryUtils.ByteArrayToHexString(rnd);
-    }
-
-    public static SecretKey generateKey() {
-        KeyGenerator keyGen;
-        try {
-            keyGen = KeyGenerator.getInstance("AES");
-        } catch (NoSuchAlgorithmException e) {
-            throw new RuntimeException("Failed to get AES algorithm.", e);
-        }
-        keyGen.init(256);
-        return keyGen.generateKey();
-    }
-
-    public static String encryptData(SecretKey key, String plaintext) {
-        try {
-            byte[] iv = new byte[32];
-            new SecureRandom().nextBytes(iv);
-
-            Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding");
-            GCMParameterSpec gcmParameterSpec = new GCMParameterSpec(128, iv);
-            cipher.init(Cipher.ENCRYPT_MODE, key, gcmParameterSpec);
-
-            byte[] plaintextBytes = plaintext.getBytes(StandardCharsets.UTF_8);
-            byte[] ciphertextBytes = cipher.doFinal(plaintextBytes);
-
-            return Base64.getEncoder().encodeToString(iv) + ';' +
-                    Base64.getEncoder().encodeToString(ciphertextBytes);
-        } catch (NoSuchPaddingException
-                 | NoSuchAlgorithmException
-                 | IllegalBlockSizeException
-                 | InvalidAlgorithmParameterException
-                 | BadPaddingException
-                 | InvalidKeyException e) {
-            throw new RuntimeException("Crypto error.", e);
-        }
-    }
-
-    public static String decryptData(SecretKey key, String ciphertext) {
-        try {
-            Cipher cipher = Cipher.getInstance("AES/GCM/NoPadding");
-            String[] parts = ciphertext.split(";");
-
-            if (parts.length != 2) {
-                throw new IllegalArgumentException("Invalid ciphertext parameter.");
-            }
-
-            byte[] iv = Base64.getDecoder().decode(parts[0]);
-            byte[] ciphertextBytes = Base64.getDecoder().decode(parts[1]);
-
-            GCMParameterSpec gcmParameterSpec = new GCMParameterSpec(128, iv);
-            cipher.init(Cipher.DECRYPT_MODE, key, gcmParameterSpec);
-
-            byte[] plaintextBytes = cipher.doFinal(ciphertextBytes);
-            return new String(plaintextBytes, StandardCharsets.UTF_8);
-        } catch (NoSuchPaddingException
-                 | IllegalBlockSizeException
-                 | InvalidAlgorithmParameterException
-                 | BadPaddingException
-                 | InvalidKeyException
-                 | NoSuchAlgorithmException e) {
-            throw new RuntimeException("Crypto error.", e);
-        }
-    }
-}

package/android/src/main/java/com/itsecrnd/rtnhceandroid/HCEService.java

@@ -1,104 +0,0 @@
-package com.itsecrnd.rtnhceandroid;
-
-import static com.itsecrnd.rtnhceandroid.IntentKeys.INTENT_READER_DETECT;
-import static com.itsecrnd.rtnhceandroid.IntentKeys.INTENT_READER_LOST;
-import static com.itsecrnd.rtnhceandroid.IntentKeys.INTENT_RECEIVE_C_APDU;
-import static com.itsecrnd.rtnhceandroid.IntentKeys.INTENT_SEND_R_APDU;
-
-import android.content.BroadcastReceiver;
-import android.content.Context;
-import android.content.Intent;
-import android.content.IntentFilter;
-import android.nfc.cardemulation.HostApduService;
-import android.os.Build;
-import android.os.Bundle;
-import android.util.Log;
-
-import androidx.annotation.RequiresApi;
-
-import java.util.Locale;
-
-import javax.crypto.SecretKey;
-import javax.crypto.spec.SecretKeySpec;
-
-@RequiresApi(api = Build.VERSION_CODES.TIRAMISU)
-public class HCEService extends HostApduService {
-    private static final String TAG = "HCEService";
-
-    private SecretKey encSecretKey;
-
-    private final BroadcastReceiver receiver = new BroadcastReceiver() {
-        @Override
-        public void onReceive(Context context, Intent intent) {
-            try {
-                String action = intent.getAction();
-
-                if (action != null) {
-                    AESGCMUtil.decryptData(encSecretKey, intent.getStringExtra("auth"));
-
-                    if (action.equals(INTENT_SEND_R_APDU)) {
-                        String rapdu = AESGCMUtil.decryptData(encSecretKey, intent.getStringExtra("rapdu"));
-                        byte[] dec = BinaryUtils.HexStringToByteArray(rapdu.toUpperCase(Locale.ROOT));
-                        sendResponseApdu(dec);
-                    }
-                }
-            } catch (Exception e) {
-                Log.e(TAG, "Failed to handle broadcast in HCEService.", e);
-            }
-        }
-    };
-
-    @Override
-    public byte[] processCommandApdu(byte[] command, Bundle extras) {
-        String capdu = AESGCMUtil.encryptData(encSecretKey, BinaryUtils.ByteArrayToHexString(command));
-
-        Intent intent = new Intent(INTENT_RECEIVE_C_APDU);
-        intent.setPackage(getApplicationContext().getPackageName());
-        intent.putExtra("auth", AESGCMUtil.encryptData(encSecretKey, AESGCMUtil.randomString()));
-        intent.putExtra("capdu", capdu);
-        getApplicationContext().sendBroadcast(intent);
-
-        return null;
-    }
-
-    @Override
-    public void onCreate() {
-        Log.d(TAG, "HCEService onCreate");
-
-        String prefsName = getApplicationContext().getPackageName() + ".nativehcemodule";
-        String encKey = getApplicationContext()
-                .getSharedPreferences(prefsName, Context.MODE_PRIVATE)
-                .getString("encKey", "");
-
-        if (encKey.isEmpty()) {
-            throw new RuntimeException("Failed to load encKey.");
-        }
-
-        byte[] bArr = BinaryUtils.HexStringToByteArray(encKey);
-        encSecretKey = new SecretKeySpec(bArr, 0, bArr.length, "AES");
-
-        /*
-         * See a comment about registerReceiver() in RTNHCEAndroidModule.
-         */
-        IntentFilter filter = new IntentFilter();
-        filter.addAction(INTENT_SEND_R_APDU);
-        getApplicationContext().registerReceiver(receiver, filter, RECEIVER_EXPORTED);
-
-        Intent intent = new Intent(INTENT_READER_DETECT);
-        intent.setPackage(getApplicationContext().getPackageName());
-        intent.putExtra("auth", AESGCMUtil.encryptData(encSecretKey, AESGCMUtil.randomString()));
-        getApplicationContext().sendBroadcast(intent);
-    }
-
-    @Override
-    public void onDeactivated(int reason) {
-        Log.d(TAG, "HCEService onDeactivated: " + reason);
-
-        getApplicationContext().unregisterReceiver(receiver);
-
-        Intent intent = new Intent(INTENT_READER_LOST);
-        intent.setPackage(getApplicationContext().getPackageName());
-        intent.putExtra("auth", AESGCMUtil.encryptData(encSecretKey, AESGCMUtil.randomString()));
-        getApplicationContext().sendBroadcast(intent);
-    }
-}