@kesha-antonov/react-native-background-downloader 4.5.3 → 4.5.5

package/ios/RNBackgroundDownloader.mm

@@ -13,6 +13,10 @@
 #define ID_TO_UPLOAD_CONFIG_MAP_KEY @"com.eko.bguploadidmap"
 #define PROGRESS_INTERVAL_KEY @"progressInterval"
 #define PROGRESS_MIN_BYTES_KEY @"progressMinBytes"
+// Persisted map of downloads whose finished file could not be moved to its destination
+// yet because the device was locked (Data Protection). The move is retried when protected
+// data becomes available / on next launch. See issue #101.
+#define PENDING_MOVES_MAP_KEY @"com.eko.bgdpendingmoves"
 
 // Session configuration constants
 static const NSInteger kMaxConnectionsPerHost = 4;
@@ -66,6 +70,18 @@ static CompletionHandler storedCompletionHandler;
     // Controls whether debug logs are sent to JS
     BOOL isLogsEnabled;
 
+    // Downloads that finished but whose file couldn't be moved to its destination because
+    // the device was locked. Keyed by configId -> staging/destination info. Retried on
+    // UIApplicationProtectedDataDidBecomeAvailable, app foreground, and launch. See #101.
+    NSMutableDictionary<NSString *, NSDictionary *> *pendingMoves;
+
+#ifdef RCT_NEW_ARCH_ENABLED
+    // Queue of events that arrived before the TurboModule event emitter callback was set.
+    // This prevents crashes (std::bad_function_call / SIGABRT) when NSURLSession delegate
+    // callbacks fire before JS has registered event listeners.
+    NSMutableArray<NSDictionary *> *pendingEmitEvents;
+#endif
+
     // Upload-specific instance variables
     NSMutableDictionary<NSNumber *, RNBGDUploadTaskConfig *> *uploadTaskToConfigMap;
     NSMutableDictionary<NSString *, NSURLSessionUploadTask *> *idToUploadTaskMap;
@@ -233,6 +249,15 @@ static const int kMaxEventRetries = 50;  // 50 retries * 100ms = 5 seconds max w
         isSessionActivated = NO;
         pendingDownloads = [[NSMutableArray alloc] init];
 
+        // Restore any downloads whose file move was deferred because the device was locked
+        NSData *pendingMovesData = [mmkv getDataForKey:PENDING_MOVES_MAP_KEY];
+        NSMutableDictionary *pendingMovesDecoded = pendingMovesData != nil ? [self deserializePendingMoves:pendingMovesData] : nil;
+        pendingMoves = pendingMovesDecoded != nil ? pendingMovesDecoded : [[NSMutableDictionary alloc] init];
+
+#ifdef RCT_NEW_ARCH_ENABLED
+        pendingEmitEvents = [[NSMutableArray alloc] init];
+#endif
+
         // Initialize upload-specific data structures
         NSData *uploadTaskToConfigMapData = [mmkv getDataForKey:ID_TO_UPLOAD_CONFIG_MAP_KEY];
         NSMutableDictionary *uploadTaskToConfigMapDataDefault = [[NSMutableDictionary alloc] init];
@@ -249,6 +274,10 @@ static const int kMaxEventRetries = 50;  // 50 retries * 100ms = 5 seconds max w
 
         // Initialize session early to receive background events on app relaunch
         [self lazyRegisterSession];
+
+        // Retry any moves that were deferred while the device was locked (e.g. a download
+        // that finished in the background before the first unlock). See #101.
+        [self processPendingMoves];
     }
 
     return self;
@@ -330,10 +359,23 @@ static const int kMaxEventRetries = 50;  // 50 retries * 100ms = 5 seconds max w
                                                   selector:@selector(handleBridgeHotReload:)
                                                   name:RCTJavaScriptWillStartLoadingNotification
                                                   object:nil];
+
+            // Finish any moves deferred while the device was locked, as soon as
+            // protected data becomes available again (device unlocked). See #101.
+            // Note: the ObjC constant has no "Notification" suffix (unlike most UIApplication ones).
+            [[NSNotificationCenter defaultCenter] addObserver:self
+                                                  selector:@selector(handleProtectedDataAvailable:)
+                                                  name:UIApplicationProtectedDataDidBecomeAvailable
+                                                  object:nil];
         }
     }
 }
 
+- (void)handleProtectedDataAvailable:(NSNotification *) note {
+    DLog(nil, @"[RNBackgroundDownloader] - [handleProtectedDataAvailable]");
+    [self processPendingMoves];
+}
+
 - (void)unregisterBridgeListener {
     DLog(nil, @"[RNBackgroundDownloader] - [unregisterBridgeListener]");
     if (isBridgeListenerInited == YES) {
@@ -345,6 +387,8 @@ static const int kMaxEventRetries = 50;  // 50 retries * 100ms = 5 seconds max w
 - (void)handleBridgeAppEnterForeground:(NSNotification *) note {
     DLog(nil, @"[RNBackgroundDownloader] - [handleBridgeAppEnterForeground]");
     [self resumeTasks];
+    // Device is unlocked when foregrounded, so finish any locked-deferred file moves.
+    [self processPendingMoves];
 }
 
 - (void)resumeTasks {
@@ -403,15 +447,24 @@ RCT_EXPORT_METHOD(setLogsEnabled:(BOOL)enabled) {
 
 - (void)_setMaxParallelDownloadsInternal:(NSInteger)max {
     DLog(nil, @"[RNBackgroundDownloader] - [setMaxParallelDownloads:%ld]", (long)max);
-    @synchronized (sharedLock) {
-        if (max >= 1) {
-            sessionConfig.HTTPMaximumConnectionsPerHost = max;
-            // Recreate session with new config if it's already initialized
-            if (urlSession != nil) {
-                [self unregisterSession];
-                [self lazyRegisterSession];
+    // Never let an NSException escape this void method. methodQueue is a custom
+    // background queue, and on the new architecture the TurboModule bridge would
+    // convert an escaping exception into a JS error via Hermes JSI on this thread
+    // (not the JS thread). Hermes is not thread-safe, so that crashes with SIGSEGV.
+    // See https://github.com/kesha-antonov/react-native-background-downloader/issues/161
+    @try {
+        @synchronized (sharedLock) {
+            if (max >= 1) {
+                sessionConfig.HTTPMaximumConnectionsPerHost = max;
+                // Recreate session with new config if it's already initialized
+                if (urlSession != nil) {
+                    [self unregisterSession];
+                    [self lazyRegisterSession];
+                }
             }
         }
+    } @catch (NSException *exception) {
+        DLog(nil, @"[RNBackgroundDownloader] - [setMaxParallelDownloads] error: %@", exception.reason);
     }
 }
 
@@ -427,13 +480,20 @@ RCT_EXPORT_METHOD(setMaxParallelDownloads:(NSInteger)max) {
 
 - (void)_setAllowsCellularAccessInternal:(BOOL)allows {
     DLog(nil, @"[RNBackgroundDownloader] - [setAllowsCellularAccess:%@]", allows ? @"YES" : @"NO");
-    @synchronized (sharedLock) {
-        sessionConfig.allowsCellularAccess = allows;
-        // Recreate session with new config if it's already initialized
-        if (urlSession != nil) {
-            [self unregisterSession];
-            [self lazyRegisterSession];
+    // Never let an NSException escape this void method - see the note on
+    // -_setMaxParallelDownloadsInternal: and issue #161. Recreating the session
+    // here can throw, and an escaping exception crashes Hermes off the JS thread.
+    @try {
+        @synchronized (sharedLock) {
+            sessionConfig.allowsCellularAccess = allows;
+            // Recreate session with new config if it's already initialized
+            if (urlSession != nil) {
+                [self unregisterSession];
+                [self lazyRegisterSession];
+            }
         }
+    } @catch (NSException *exception) {
+        DLog(nil, @"[RNBackgroundDownloader] - [setAllowsCellularAccess] error: %@", exception.reason);
     }
 }
 
@@ -455,6 +515,7 @@ RCT_EXPORT_METHOD(setAllowsCellularAccess:(BOOL)allows) {
     NSString *destination = options.destination();
     NSString *metadata = options.metadata() ? options.metadata() : @"";
     NSDictionary *headers = options.headers() ? (NSDictionary *)options.headers() : nil;
+    NSString *dataProtection = options.iosDataProtection() ? options.iosDataProtection() : nil;
 
     if (options.progressInterval().has_value()) {
         progressInterval = options.progressInterval().value() / 1000.0;
@@ -475,6 +536,7 @@ RCT_EXPORT_METHOD(download: (NSDictionary *) options) {
     NSString *destination = options[@"destination"];
     NSString *metadata = options[@"metadata"] ?: @"";
     NSDictionary *headers = options[@"headers"];
+    NSString *dataProtection = options[@"iosDataProtection"];
 
     NSNumber *progressIntervalScope = options[@"progressInterval"];
     if (progressIntervalScope) {
@@ -511,38 +573,47 @@ RCT_EXPORT_METHOD(download: (NSDictionary *) options) {
         }
     }
 
-    @synchronized (sharedLock) {
-        [self sendDebugLog:@"download: calling lazyRegisterSession" taskId:identifier];
-        [self lazyRegisterSession];
+    // download is a void method dispatched on the custom background methodQueue.
+    // Any NSException that escapes would be converted to a JS error via Hermes JSI
+    // on this thread (not the JS thread) and crash with SIGSEGV (issue #161), so we
+    // never let one propagate out of this method.
+    @try {
+        @synchronized (sharedLock) {
+            [self sendDebugLog:@"download: calling lazyRegisterSession" taskId:identifier];
+            [self lazyRegisterSession];
 
-        // If session is not yet activated, queue the download to be executed after activation
-        // This fixes the issue where downloads don't start on fresh app installs
-        if (!isSessionActivated) {
-            DLog(identifier, @"[RNBackgroundDownloader] - [download] session not activated, queueing download");
-            [self sendDebugLog:@"download: session not activated, queueing download" taskId:identifier];
-            __weak RNBackgroundDownloader *weakSelf = self;
-            dispatch_block_t downloadBlock = ^{
-                RNBackgroundDownloader *strongSelf = weakSelf;
-                if (strongSelf) {
-                    [strongSelf executeDownloadWithRequest:request identifier:identifier url:url destination:destination metadata:metadata];
-                }
-            };
-            [pendingDownloads addObject:downloadBlock];
-            return;
-        }
+            // If session is not yet activated, queue the download to be executed after activation
+            // This fixes the issue where downloads don't start on fresh app installs
+            if (!isSessionActivated) {
+                DLog(identifier, @"[RNBackgroundDownloader] - [download] session not activated, queueing download");
+                [self sendDebugLog:@"download: session not activated, queueing download" taskId:identifier];
+                __weak RNBackgroundDownloader *weakSelf = self;
+                dispatch_block_t downloadBlock = ^{
+                    RNBackgroundDownloader *strongSelf = weakSelf;
+                    if (strongSelf) {
+                        [strongSelf executeDownloadWithRequest:request identifier:identifier url:url destination:destination metadata:metadata dataProtection:dataProtection];
+                    }
+                };
+                [pendingDownloads addObject:downloadBlock];
+                return;
+            }
 
-        [self sendDebugLog:@"download: session activated, executing download" taskId:identifier];
-        [self executeDownloadWithRequest:request identifier:identifier url:url destination:destination metadata:metadata];
+            [self sendDebugLog:@"download: session activated, executing download" taskId:identifier];
+            [self executeDownloadWithRequest:request identifier:identifier url:url destination:destination metadata:metadata dataProtection:dataProtection];
+        }
+    } @catch (NSException *exception) {
+        DLog(identifier, @"[RNBackgroundDownloader] - [download] error: %@", exception.reason);
+        [self sendDebugLog:[NSString stringWithFormat:@"download: ERROR - %@", exception.reason] taskId:identifier];
     }
 }
 
 // Internal method to execute the download after session is activated
-- (void)executeDownloadWithRequest:(NSMutableURLRequest *)request identifier:(NSString *)identifier url:(NSString *)url destination:(NSString *)destination metadata:(NSString *)metadata {
+- (void)executeDownloadWithRequest:(NSMutableURLRequest *)request identifier:(NSString *)identifier url:(NSString *)url destination:(NSString *)destination metadata:(NSString *)metadata dataProtection:(NSString *)dataProtection {
     @synchronized (sharedLock) {
         DLog(identifier, @"[RNBackgroundDownloader] - [executeDownloadWithRequest]");
         [self sendDebugLog:@"executeDownloadWithRequest: creating download task" taskId:identifier];
 
-        NSURLSessionDownloadTask __strong *task = [urlSession downloadTaskWithRequest:request];
+        NSURLSessionDownloadTask __strong *task = [self createDownloadTaskWithRequest:request identifier:identifier];
         if (task == nil) {
             DLog(identifier, @"[RNBackgroundDownloader] - [Error] failed to create download task");
             [self sendDebugLog:@"executeDownloadWithRequest: ERROR - failed to create download task" taskId:identifier];
@@ -557,6 +628,8 @@ RCT_EXPORT_METHOD(download: (NSDictionary *) options) {
             @"destination": destination,
             @"metadata": metadata
         }];
+        // nil means "use the library default" when saving the file (see -nsFileProtectionFromKey:)
+        taskConfig.dataProtection = dataProtection;
 
         taskToConfigMap[@(task.taskIdentifier)] = taskConfig;
         [mmkv setData:[self serialize: taskToConfigMap] forKey:ID_TO_CONFIG_MAP_KEY];
@@ -571,6 +644,36 @@ RCT_EXPORT_METHOD(download: (NSDictionary *) options) {
     }
 }
 
+// Creates a download task on the current session. If the session has been
+// invalidated (e.g. after a hot reload or a prior invalidateAndCancel),
+// -downloadTaskWithRequest: raises:
+//   "attempted to create a NSURLSessionDownloadTask in a session that has
+//    been invalidated"
+// In that case we recreate the background session and retry once.
+// Must be called while holding sharedLock.
+// See https://github.com/kesha-antonov/react-native-background-downloader/issues/157
+- (NSURLSessionDownloadTask *)createDownloadTaskWithRequest:(NSMutableURLRequest *)request identifier:(NSString *)identifier {
+    @try {
+        return [urlSession downloadTaskWithRequest:request];
+    } @catch (NSException *exception) {
+        DLog(identifier, @"[RNBackgroundDownloader] - [createDownloadTask] session invalidated, recreating: %@", exception.reason);
+        [self sendDebugLog:[NSString stringWithFormat:@"createDownloadTask: session invalidated, recreating (%@)", exception.reason] taskId:identifier];
+
+        // Recreate the background session directly (do not call unregisterSession,
+        // which would invalidateAndCancel and drop queued downloads).
+        urlSession = [NSURLSession sessionWithConfiguration:sessionConfig delegate:self delegateQueue:nil];
+        isSessionActivated = YES;
+
+        @try {
+            return [urlSession downloadTaskWithRequest:request];
+        } @catch (NSException *retryException) {
+            DLog(identifier, @"[RNBackgroundDownloader] - [createDownloadTask] retry failed: %@", retryException.reason);
+            [self sendDebugLog:[NSString stringWithFormat:@"createDownloadTask: retry failed (%@)", retryException.reason] taskId:identifier];
+            return nil;
+        }
+    }
+}
+
 - (void)pauseTaskInternal:(NSString *)identifier resolve:(RCTPromiseResolveBlock)resolve reject:(RCTPromiseRejectBlock)reject {
     DLog(identifier, @"[RNBackgroundDownloader] - [pauseTask]");
     @try {
@@ -765,6 +868,15 @@ RCT_EXPORT_METHOD(resumeTask:(NSString *)id resolver:(RCTPromiseResolveBlock)res
             [idsToPauseSet removeObject:identifier];
             // Clean up any updated headers
             [idToUpdatedHeadersMap removeObjectForKey:identifier];
+            // Drop any locked-deferred move staged for this task (#101)
+            NSDictionary *pendingMove = pendingMoves[identifier];
+            if (pendingMove != nil) {
+                NSString *stagingPath = pendingMove[@"staging"];
+                if (stagingPath != nil)
+                    [[NSFileManager defaultManager] removeItemAtPath:stagingPath error:nil];
+                [pendingMoves removeObjectForKey:identifier];
+                [self persistPendingMoves];
+            }
         }
         resolve(nil);
     } @catch (NSException *exception) {
@@ -1140,6 +1252,36 @@ RCT_EXPORT_METHOD(getExistingDownloadTasks: (RCTPromiseResolveBlock)resolve reje
     }
 }
 
+#ifdef RCT_NEW_ARCH_ENABLED
+#pragma mark - Safe event emission (New Architecture)
+
+// Safely emit an event, queuing it if the TurboModule event emitter callback
+// has not been registered yet. This prevents std::bad_function_call crashes
+// when NSURLSession delegate callbacks fire before JS has registered listeners
+// (e.g., background session delivering completions from a prior app session).
+- (void)safeEmitEvent:(NSString *)eventName value:(id)value {
+    @synchronized (pendingEmitEvents) {
+        if (_eventEmitterCallback) {
+            _eventEmitterCallback(std::string([eventName UTF8String]), value);
+        } else {
+            [pendingEmitEvents addObject:@{@"name": eventName, @"value": value}];
+        }
+    }
+}
+
+- (void)setEventEmitterCallback:(EventEmitterCallbackWrapper *)eventEmitterCallbackWrapper {
+    @synchronized (pendingEmitEvents) {
+        [super setEventEmitterCallback:eventEmitterCallbackWrapper];
+
+        // Flush any events that arrived before the callback was set
+        for (NSDictionary *event in pendingEmitEvents) {
+            _eventEmitterCallback(std::string([event[@"name"] UTF8String]), event[@"value"]);
+        }
+        [pendingEmitEvents removeAllObjects];
+    }
+}
+#endif
+
 #pragma mark - NSURLSessionDownloadDelegate methods
 - (void)URLSession:(nonnull NSURLSession *)session downloadTask:(nonnull NSURLSessionDownloadTask *)downloadTask didFinishDownloadingToURL:(nonnull NSURL *)location {
     @synchronized (sharedLock) {
@@ -1153,8 +1295,21 @@ RCT_EXPORT_METHOD(getExistingDownloadTasks: (RCTPromiseResolveBlock)resolve reje
         [self sendDebugLog:@"didFinishDownloadingToURL: download finished" taskId:taskConfig.id];
 
         NSError *error = [self getServerError:downloadTask];
+        BOOL deferred = NO;
         if (!error) {
-            [self saveFile:taskConfig downloadURL:location error:&error];
+            [self saveFile:taskConfig downloadURL:location bytesDownloaded:downloadTask.countOfBytesReceived bytesTotal:downloadTask.countOfBytesExpectedToReceive error:&error deferred:&deferred];
+        }
+
+        // Drop any buffered progress for this task so it cannot arrive in JS after downloadComplete
+        [progressReports removeObjectForKey:taskConfig.id];
+
+        if (deferred) {
+            // The device was locked and the file couldn't be moved to its destination yet.
+            // The bytes are staged and the move (and the downloadComplete event) will happen
+            // once protected data becomes available. Do not emit complete/failed now. See #101.
+            [self sendDebugLog:@"didFinishDownloadingToURL: move deferred until device unlock" taskId:taskConfig.id];
+            [self removeTaskFromMap:downloadTask];
+            return;
         }
 
         if (error) {
@@ -1170,7 +1325,7 @@ RCT_EXPORT_METHOD(getExistingDownloadTasks: (RCTPromiseResolveBlock)resolve reje
 - (void)sendDownloadCompletionEvent:(RNBGDTaskConfig *)taskConfig task:(NSURLSessionDownloadTask *)task error:(NSError *)error {
     if (error) {
 #ifdef RCT_NEW_ARCH_ENABLED
-        [self emitOnDownloadFailed:@{
+        [self safeEmitEvent:@"onDownloadFailed" value:@{
             @"id": taskConfig.id,
             @"error": [error localizedDescription],
             @"errorCode": @(error.code)
@@ -1184,7 +1339,7 @@ RCT_EXPORT_METHOD(getExistingDownloadTasks: (RCTPromiseResolveBlock)resolve reje
 #endif
     } else {
 #ifdef RCT_NEW_ARCH_ENABLED
-        [self emitOnDownloadComplete:@{
+        [self safeEmitEvent:@"onDownloadComplete" value:@{
             @"id": taskConfig.id,
             @"location": taskConfig.destination,
             @"bytesDownloaded": @(task.countOfBytesReceived),
@@ -1243,7 +1398,7 @@ RCT_EXPORT_METHOD(getExistingDownloadTasks: (RCTPromiseResolveBlock)resolve reje
         responseHeaders = @{};
     }
 #ifdef RCT_NEW_ARCH_ENABLED
-    [self emitOnDownloadBegin:@{
+    [self safeEmitEvent:@"onDownloadBegin" value:@{
         @"id": taskConfig.id,
         @"expectedBytes": @(expectedBytes),
         @"headers": responseHeaders
@@ -1290,7 +1445,7 @@ RCT_EXPORT_METHOD(getExistingDownloadTasks: (RCTPromiseResolveBlock)resolve reje
     NSDate *now = [NSDate date];
     if ([now timeIntervalSinceDate:lastProgressReportedAt] > progressInterval) {
 #ifdef RCT_NEW_ARCH_ENABLED
-        [self emitOnDownloadProgress:[progressReports allValues]];
+        [self safeEmitEvent:@"onDownloadProgress" value:[progressReports allValues]];
 #else
         [self sendEventWithName:@"downloadProgress" body:[progressReports allValues]];
 #endif
@@ -1385,7 +1540,7 @@ RCT_EXPORT_METHOD(getExistingDownloadTasks: (RCTPromiseResolveBlock)resolve reje
 
         // Handle failure
 #ifdef RCT_NEW_ARCH_ENABLED
-        [self emitOnDownloadFailed:@{
+        [self safeEmitEvent:@"onDownloadFailed" value:@{
             @"id": taskConfig.id,
             @"error": [error localizedDescription],
             @"errorCode": @(error.code)
@@ -1764,7 +1919,7 @@ RCT_EXPORT_METHOD(getExistingUploadTasks:(RCTPromiseResolveBlock)resolve rejecte
         if (!taskConfig.reportedBegin) {
             taskConfig.reportedBegin = YES;
 #ifdef RCT_NEW_ARCH_ENABLED
-            [self emitOnUploadBegin:@{
+            [self safeEmitEvent:@"onUploadBegin" value:@{
                 @"id": taskConfig.id,
                 @"expectedBytes": @(totalBytesExpectedToSend)
             }];
@@ -1801,7 +1956,7 @@ RCT_EXPORT_METHOD(getExistingUploadTasks:(RCTPromiseResolveBlock)resolve rejecte
             NSDate *now = [NSDate date];
             if ([now timeIntervalSinceDate:lastUploadProgressReportedAt] > progressInterval) {
 #ifdef RCT_NEW_ARCH_ENABLED
-                [self emitOnUploadProgress:[uploadProgressReports allValues]];
+                [self safeEmitEvent:@"onUploadProgress" value:[uploadProgressReports allValues]];
 #else
                 [self sendEventWithName:@"uploadProgress" body:[uploadProgressReports allValues]];
 #endif
@@ -1847,7 +2002,7 @@ RCT_EXPORT_METHOD(getExistingUploadTasks:(RCTPromiseResolveBlock)resolve rejecte
 
             DLog(taskConfig.id, @"[RNBackgroundDownloader] - [handleUploadCompletion] error: %@", error);
 #ifdef RCT_NEW_ARCH_ENABLED
-            [self emitOnUploadFailed:@{
+            [self safeEmitEvent:@"onUploadFailed" value:@{
                 @"id": taskConfig.id,
                 @"error": [error localizedDescription],
                 @"errorCode": @(error.code)
@@ -1873,7 +2028,7 @@ RCT_EXPORT_METHOD(getExistingUploadTasks:(RCTPromiseResolveBlock)resolve rejecte
 
             DLog(taskConfig.id, @"[RNBackgroundDownloader] - [handleUploadCompletion] success, responseCode: %ld", (long)responseCode);
 #ifdef RCT_NEW_ARCH_ENABLED
-            [self emitOnUploadComplete:@{
+            [self safeEmitEvent:@"onUploadComplete" value:@{
                 @"id": taskConfig.id,
                 @"responseCode": @(responseCode),
                 @"responseBody": responseBody,
@@ -1937,8 +2092,20 @@ RCT_EXPORT_METHOD(getExistingUploadTasks:(RCTPromiseResolveBlock)resolve rejecte
                            userInfo:@{NSLocalizedDescriptionKey: [NSHTTPURLResponse localizedStringForStatusCode:statusCode]}];
 }
 
-- (BOOL)saveFile: (nonnull RNBGDTaskConfig *) taskConfig downloadURL:(nonnull NSURL *)location error:(NSError **)saveError {
+// Maps the JS data-protection key to an NSFileProtection* constant.
+// nil / unknown -> NSFileProtectionCompleteUntilFirstUserAuthentication, which lets a
+// background download save its file even while the device is locked (after first unlock).
+// See https://github.com/kesha-antonov/react-native-background-downloader/issues/101
+- (NSString *)nsFileProtectionFromKey:(NSString *)key {
+    if ([key isEqualToString:@"complete"]) return NSFileProtectionComplete;
+    if ([key isEqualToString:@"completeUnlessOpen"]) return NSFileProtectionCompleteUnlessOpen;
+    if ([key isEqualToString:@"none"]) return NSFileProtectionNone;
+    return NSFileProtectionCompleteUntilFirstUserAuthentication;
+}
+
+- (BOOL)saveFile: (nonnull RNBGDTaskConfig *) taskConfig downloadURL:(nonnull NSURL *)location bytesDownloaded:(int64_t)bytesDownloaded bytesTotal:(int64_t)bytesTotal error:(NSError **)saveError deferred:(BOOL *)deferred {
     DLog(taskConfig.id, @"[RNBackgroundDownloader] - [saveFile]");
+    if (deferred) *deferred = NO;
     // taskConfig.destination is absolute path.
     // The absolute path may change when the application is restarted.
     // But the relative path remains the same.
@@ -1960,10 +2127,170 @@ RCT_EXPORT_METHOD(getExistingUploadTasks:(RCTPromiseResolveBlock)resolve rejecte
     NSURL *destinationURL = [NSURL fileURLWithPath:fileAbsolutePath];
 
     NSFileManager *fileManager = [NSFileManager defaultManager];
-    [fileManager createDirectoryAtURL:[destinationURL URLByDeletingLastPathComponent] withIntermediateDirectories:YES attributes:nil error:nil];
+    // Create the destination directory with a protection class that allows writing while the
+    // device is locked, so a background download can save when it finishes on a locked device.
+    [fileManager createDirectoryAtURL:[destinationURL URLByDeletingLastPathComponent]
+          withIntermediateDirectories:YES
+                           attributes:@{NSFileProtectionKey: NSFileProtectionCompleteUntilFirstUserAuthentication}
+                                error:nil];
     [fileManager removeItemAtURL:destinationURL error:nil];
 
-    return [fileManager moveItemAtURL:location toURL:destinationURL error:saveError];
+    NSError *moveError = nil;
+    BOOL moved = [fileManager moveItemAtURL:location toURL:destinationURL error:&moveError];
+    if (moved) {
+        // Apply the requested protection level to the final file (best-effort).
+        NSString *protection = [self nsFileProtectionFromKey:taskConfig.dataProtection];
+        [fileManager setAttributes:@{NSFileProtectionKey: protection} ofItemAtPath:destinationURL.path error:nil];
+        return YES;
+    }
+
+    // The move failed - most commonly because the device is locked and the destination is
+    // protected (Data Protection). Stage the downloaded bytes to an unprotected location and
+    // finish the move once the device is unlocked, instead of losing the download. See #101.
+    if ([self stageAndDeferMoveForConfig:taskConfig location:location destination:destinationURL bytesDownloaded:bytesDownloaded bytesTotal:bytesTotal]) {
+        if (deferred) *deferred = YES;
+        return NO;
+    }
+
+    // Couldn't even stage the file - report the original move error.
+    if (saveError) *saveError = moveError;
+    return NO;
+}
+
+#pragma mark - Locked-device deferred move (issue #101)
+
+// Directory (with NSFileProtectionNone) used to hold finished downloads whose move to the
+// final destination is deferred because the device is locked.
+- (NSURL *)pendingMovesDirectory {
+    NSFileManager *fileManager = [NSFileManager defaultManager];
+    NSURL *cachesDir = [[fileManager URLsForDirectory:NSCachesDirectory inDomains:NSUserDomainMask] firstObject];
+    NSURL *dir = [cachesDir URLByAppendingPathComponent:@"RNBGDPendingMoves" isDirectory:YES];
+    if (![fileManager fileExistsAtPath:dir.path]) {
+        // NSFileProtectionNone so we can write here even while the device is locked.
+        [fileManager createDirectoryAtURL:dir
+              withIntermediateDirectories:YES
+                               attributes:@{NSFileProtectionKey: NSFileProtectionNone}
+                                    error:nil];
+    }
+    return dir;
+}
+
+// Moves the just-finished download out of the system temp into an unprotected staging file and
+// records the pending move. Returns YES if the bytes were safely staged. Must hold sharedLock.
+- (BOOL)stageAndDeferMoveForConfig:(RNBGDTaskConfig *)taskConfig location:(NSURL *)location destination:(NSURL *)destinationURL bytesDownloaded:(int64_t)bytesDownloaded bytesTotal:(int64_t)bytesTotal {
+    NSFileManager *fileManager = [NSFileManager defaultManager];
+    NSURL *stagingURL = [[self pendingMovesDirectory] URLByAppendingPathComponent:[NSString stringWithFormat:@"%@.staged", taskConfig.id]];
+
+    [fileManager removeItemAtURL:stagingURL error:nil];
+    NSError *stageError = nil;
+    if (![fileManager moveItemAtURL:location toURL:stagingURL error:&stageError]) {
+        DLog(taskConfig.id, @"[RNBackgroundDownloader] - [stageAndDeferMove] staging failed: %@", stageError.localizedDescription);
+        return NO;
+    }
+    // Make sure the staged file is readable while locked.
+    [fileManager setAttributes:@{NSFileProtectionKey: NSFileProtectionNone} ofItemAtPath:stagingURL.path error:nil];
+
+    pendingMoves[taskConfig.id] = @{
+        @"id": taskConfig.id,
+        @"staging": stagingURL.path,
+        @"destination": destinationURL.path,
+        @"dataProtection": taskConfig.dataProtection ?: @"",
+        @"bytesDownloaded": @(bytesDownloaded),
+        @"bytesTotal": @(bytesTotal)
+    };
+    [self persistPendingMoves];
+    DLog(taskConfig.id, @"[RNBackgroundDownloader] - [stageAndDeferMove] staged %lld bytes, move deferred until unlock", (long long)bytesDownloaded);
+    return YES;
+}
+
+// Attempts to complete any deferred moves. Safe to call repeatedly; only succeeds for items
+// whose destination is currently writable (i.e. the device is unlocked enough). Emits
+// downloadComplete for each move that finishes.
+- (void)processPendingMoves {
+    dispatch_async(dispatch_get_global_queue(QOS_CLASS_UTILITY, 0), ^{
+        @synchronized (self->sharedLock) {
+            if (self->pendingMoves.count == 0) return;
+
+            NSFileManager *fileManager = [NSFileManager defaultManager];
+            NSArray<NSString *> *ids = [self->pendingMoves allKeys];
+            BOOL changed = NO;
+
+            for (NSString *taskId in ids) {
+                NSDictionary *info = self->pendingMoves[taskId];
+                NSString *stagingPath = info[@"staging"];
+                NSString *destinationPath = info[@"destination"];
+                if (stagingPath == nil || destinationPath == nil) {
+                    [self->pendingMoves removeObjectForKey:taskId];
+                    changed = YES;
+                    continue;
+                }
+
+                if (![fileManager fileExistsAtPath:stagingPath]) {
+                    // Staged file is gone - nothing we can do, drop the record.
+                    [self->pendingMoves removeObjectForKey:taskId];
+                    changed = YES;
+                    continue;
+                }
+
+                NSURL *destinationURL = [NSURL fileURLWithPath:destinationPath];
+                [fileManager createDirectoryAtURL:[destinationURL URLByDeletingLastPathComponent]
+                      withIntermediateDirectories:YES
+                                       attributes:@{NSFileProtectionKey: NSFileProtectionCompleteUntilFirstUserAuthentication}
+                                            error:nil];
+                [fileManager removeItemAtURL:destinationURL error:nil];
+
+                NSError *moveError = nil;
+                BOOL moved = [fileManager moveItemAtURL:[NSURL fileURLWithPath:stagingPath] toURL:destinationURL error:&moveError];
+                if (!moved) {
+                    // Still can't write (device likely still locked) - keep it for the next attempt.
+                    DLog(taskId, @"[RNBackgroundDownloader] - [processPendingMoves] still deferred: %@", moveError.localizedDescription);
+                    continue;
+                }
+
+                NSString *protection = [self nsFileProtectionFromKey:(info[@"dataProtection"] != nil && [info[@"dataProtection"] length] > 0 ? info[@"dataProtection"] : nil)];
+                [fileManager setAttributes:@{NSFileProtectionKey: protection} ofItemAtPath:destinationURL.path error:nil];
+
+                [self->pendingMoves removeObjectForKey:taskId];
+                changed = YES;
+
+                DLog(taskId, @"[RNBackgroundDownloader] - [processPendingMoves] completed deferred move");
+                NSDictionary *body = @{
+                    @"id": taskId,
+                    @"location": destinationPath,
+                    @"bytesDownloaded": info[@"bytesDownloaded"] ?: @0,
+                    @"bytesTotal": info[@"bytesTotal"] ?: @0
+                };
+#ifdef RCT_NEW_ARCH_ENABLED
+                [self safeEmitEvent:@"onDownloadComplete" value:body];
+#else
+                [self sendEventWithName:@"downloadComplete" body:body];
+#endif
+            }
+
+            if (changed) [self persistPendingMoves];
+        }
+    });
+}
+
+- (void)persistPendingMoves {
+    NSError *error = nil;
+    NSData *data = [NSKeyedArchiver archivedDataWithRootObject:pendingMoves requiringSecureCoding:YES error:&error];
+    if (error) {
+        DLog(nil, @"[RNBackgroundDownloader] - [persistPendingMoves] serialization error: %@", error);
+        return;
+    }
+    [mmkv setData:data forKey:PENDING_MOVES_MAP_KEY];
+}
+
+- (NSMutableDictionary *)deserializePendingMoves:(NSData *)data {
+    NSError *error = nil;
+    NSSet *classes = [NSSet setWithObjects:[NSMutableDictionary class], [NSDictionary class], [NSString class], [NSNumber class], nil];
+    NSDictionary *decoded = [NSKeyedUnarchiver unarchivedObjectOfClasses:classes fromData:data error:&error];
+    if (error || decoded == nil) {
+        DLog(nil, @"[RNBackgroundDownloader] - [deserializePendingMoves] error: %@", error);
+        return nil;
+    }
+    return [decoded mutableCopy];
 }
 
 #pragma mark - serialization

package/lib/DownloadTask.d.ts

@@ -0,0 +1,39 @@
+import { TaskInfo, DownloadTask as DownloadTaskType, BeginHandler, ProgressHandler, DoneHandler, ErrorHandler, BeginHandlerParams, ProgressHandlerParams, DoneHandlerParams, ErrorHandlerParams, TaskInfoNative, DownloadParams, DownloadTaskState, Metadata } from './types';
+export declare class DownloadTask {
+    id: string;
+    metadata: Metadata;
+    destination?: string;
+    state: DownloadTaskState;
+    errorCode: number;
+    bytesDownloaded: number;
+    bytesTotal: number;
+    downloadParams?: DownloadParams;
+    beginHandler?: BeginHandler;
+    progressHandler?: ProgressHandler;
+    doneHandler?: DoneHandler;
+    errorHandler?: ErrorHandler;
+    constructor(taskParams: TaskInfo | TaskInfoNative, originalTask?: DownloadTaskType);
+    begin(handler: BeginHandler): this;
+    progress(handler: ProgressHandler): this;
+    done(handler: DoneHandler): this;
+    error(handler: ErrorHandler): this;
+    onBegin(params: BeginHandlerParams): void;
+    onProgress(params: ProgressHandlerParams): void;
+    onDone(params: DoneHandlerParams): void;
+    onError(params: ErrorHandlerParams): void;
+    /**
+     * Update download parameters.
+     * If the task is paused, this will also update headers in the native layer.
+     * If the task is in-progress or completed, only the local JS object is updated.
+     *
+     * @param downloadParams - The new download parameters
+     * @returns Promise<boolean> - true if native headers were updated, false otherwise
+     */
+    setDownloadParams(downloadParams: DownloadParams): Promise<boolean>;
+    pause(): Promise<void>;
+    resume(): Promise<void>;
+    start(): void;
+    stop(): Promise<void>;
+    tryParseJson(metadata?: string | Metadata | object): Metadata | null;
+    private headersToUnsafeObject;
+}