@oxy.so/services 9.2.0 → 11.0.0

package/plugins/withSharedDeviceSessionReader.js

@@ -1,57 +0,0 @@
-/**
- * Config plugin: withSharedDeviceSessionReader (every other official Oxy app).
- *
- * A reader app JOINS the device's existing session — it adopts the shared
- * `deviceId` + `deviceSecret` a hub app published, so it lands signed in with no
- * QR and, crucially, without ever asking for Commons's private identity key.
- * This plugin wires the minimal Android side of `@oxy.so/services`:
- *
- *  - Requests the `signature`-level permission
- *    `so.oxy.shared.permission.READ_DEVICE_SESSION` (defined by the hub apps).
- *    Because it is `signature`, it is granted only when this app is signed with
- *    the SAME certificate as the hub — that is the entire trust boundary, and it
- *    is what makes an incorrectly-signed app unable to read the slot.
- *  - Adds `<queries>` entries for the hub authorities so package-visibility
- *    filtering (Android 11+) never hides them from `ContentResolver.call`.
- *
- * The provider itself is declared only by the hub apps
- * (`withSharedDeviceSessionProvider`) — see the note there about why hosting is
- * restricted to apps inside the `so.oxy.shared` UID.
- *
- * Keep this list identical to `PROVIDER_AUTHORITIES` in
- * `android/src/main/java/so/oxy/devicesession/OxyDeviceSessionModule.kt`.
- */
-const { withAndroidManifest } = require('@expo/config-plugins');
-
-const READ_DEVICE_SESSION_PERMISSION = 'so.oxy.shared.permission.READ_DEVICE_SESSION';
-const PROVIDER_AUTHORITIES = [
-  'so.oxy.accounts.devicesession',
-  'so.oxy.accounts.dev.devicesession',
-  'so.oxy.commons.devicesession',
-  'so.oxy.commons.dev.devicesession',
-];
-
-module.exports = function withSharedDeviceSessionReader(config) {
-  return withAndroidManifest(config, (modConfig) => {
-    const manifest = modConfig.modResults.manifest;
-
-    manifest['uses-permission'] = manifest['uses-permission'] ?? [];
-    if (!manifest['uses-permission'].some((p) => p.$['android:name'] === READ_DEVICE_SESSION_PERMISSION)) {
-      manifest['uses-permission'].push({ $: { 'android:name': READ_DEVICE_SESSION_PERMISSION } });
-    }
-
-    manifest['queries'] = manifest['queries'] ?? [];
-    if (manifest['queries'].length === 0) {
-      manifest['queries'].push({});
-    }
-    const queries = manifest['queries'][0];
-    queries.provider = queries.provider ?? [];
-    for (const authority of PROVIDER_AUTHORITIES) {
-      if (!queries.provider.some((p) => p.$['android:authorities'] === authority)) {
-        queries.provider.push({ $: { 'android:authorities': authority } });
-      }
-    }
-
-    return modConfig;
-  });
-};

package/plugins/withSharedIdentityProvider.js

@@ -1,83 +0,0 @@
-/**
- * Config plugin: withSharedIdentityProvider (Commons only).
- *
- * Commons is the identity vault — the ONE app that HOSTS the cross-app shared
- * identity. This plugin wires the Android side of `@oxy.so/services`:
- *
- *  - Defines a `signature`-level permission `so.oxy.shared.permission.READ_IDENTITY`.
- *    `signature` means only apps signed with the SAME certificate (the shared
- *    Oxy release keystore) can hold it — the trust boundary is the signing key,
- *    not the deprecated `sharedUserId`.
- *  - Requests that same permission (`<uses-permission>`) so Commons can also
- *    read cross-authority (e.g. prod ⇆ dev variant) through the provider.
- *  - Declares the `OxyIdentityProvider` at authority `${applicationId}.identity`
- *    (AGP substitutes `${applicationId}` at build → `so.oxy.commons.identity`,
- *    or `so.oxy.commons.dev.identity` for the dev variant), guarded by that
- *    permission.
- *  - Adds a `<queries>` entry for the provider authorities so package-visibility
- *    filtering (Android 11+) never hides the sibling provider from the resolver.
- *
- * Reader apps (accounts, Mention, …) use the companion `withSharedIdentityReader`
- * plugin, which only requests the permission + queries — they never host the
- * provider.
- */
-const { withAndroidManifest } = require('@expo/config-plugins');
-
-const READ_IDENTITY_PERMISSION = 'so.oxy.shared.permission.READ_IDENTITY';
-const PROVIDER_CLASS = 'so.oxy.identity.OxyIdentityProvider';
-const PROVIDER_AUTHORITIES = ['so.oxy.commons.identity', 'so.oxy.commons.dev.identity'];
-
-module.exports = function withSharedIdentityProvider(config) {
-  return withAndroidManifest(config, (modConfig) => {
-    const manifest = modConfig.modResults.manifest;
-
-    // 1. Define the signature-level permission.
-    manifest['permission'] = manifest['permission'] ?? [];
-    if (!manifest['permission'].some((p) => p.$['android:name'] === READ_IDENTITY_PERMISSION)) {
-      manifest['permission'].push({
-        $: {
-          'android:name': READ_IDENTITY_PERMISSION,
-          'android:protectionLevel': 'signature',
-        },
-      });
-    }
-
-    // 2. Request it (Commons reads cross-authority too).
-    manifest['uses-permission'] = manifest['uses-permission'] ?? [];
-    if (!manifest['uses-permission'].some((p) => p.$['android:name'] === READ_IDENTITY_PERMISSION)) {
-      manifest['uses-permission'].push({ $: { 'android:name': READ_IDENTITY_PERMISSION } });
-    }
-
-    // 3. Make the sibling provider authorities visible under package filtering.
-    manifest['queries'] = manifest['queries'] ?? [];
-    if (manifest['queries'].length === 0) {
-      manifest['queries'].push({});
-    }
-    const queries = manifest['queries'][0];
-    queries.provider = queries.provider ?? [];
-    for (const authority of PROVIDER_AUTHORITIES) {
-      if (!queries.provider.some((p) => p.$['android:authorities'] === authority)) {
-        queries.provider.push({ $: { 'android:authorities': authority } });
-      }
-    }
-
-    // 4. Host the provider.
-    const app = manifest.application?.[0];
-    if (!app) {
-      throw new Error('withSharedIdentityProvider: AndroidManifest has no <application>');
-    }
-    app.provider = app.provider ?? [];
-    if (!app.provider.some((p) => p.$['android:name'] === PROVIDER_CLASS)) {
-      app.provider.push({
-        $: {
-          'android:name': PROVIDER_CLASS,
-          'android:authorities': '${applicationId}.identity',
-          'android:exported': 'true',
-          'android:permission': READ_IDENTITY_PERMISSION,
-        },
-      });
-    }
-
-    return modConfig;
-  });
-};

package/plugins/withSharedIdentityReader.js

@@ -1,46 +0,0 @@
-/**
- * Config plugin: withSharedIdentityReader (reader RPs — accounts, etc.).
- *
- * Reader apps do NOT host the shared identity — they only READ it from the
- * Commons-hosted `OxyIdentityProvider` to enable silent "Sign in with Oxy".
- * This plugin wires the minimal Android side of `@oxy.so/services`:
- *
- *  - Requests the `signature`-level permission `so.oxy.shared.permission.READ_IDENTITY`
- *    (defined by Commons). Because it is `signature`, it is only granted when
- *    this app is signed with the SAME certificate as Commons (the shared Oxy
- *    release keystore) — that is the entire trust boundary.
- *  - Adds a `<queries>` entry for the Commons provider authorities so
- *    package-visibility filtering (Android 11+) never hides the provider from
- *    `ContentResolver.call`.
- *
- * The provider itself is declared only in Commons (`withSharedIdentityProvider`).
- */
-const { withAndroidManifest } = require('@expo/config-plugins');
-
-const READ_IDENTITY_PERMISSION = 'so.oxy.shared.permission.READ_IDENTITY';
-const PROVIDER_AUTHORITIES = ['so.oxy.commons.identity', 'so.oxy.commons.dev.identity'];
-
-module.exports = function withSharedIdentityReader(config) {
-  return withAndroidManifest(config, (modConfig) => {
-    const manifest = modConfig.modResults.manifest;
-
-    manifest['uses-permission'] = manifest['uses-permission'] ?? [];
-    if (!manifest['uses-permission'].some((p) => p.$['android:name'] === READ_IDENTITY_PERMISSION)) {
-      manifest['uses-permission'].push({ $: { 'android:name': READ_IDENTITY_PERMISSION } });
-    }
-
-    manifest['queries'] = manifest['queries'] ?? [];
-    if (manifest['queries'].length === 0) {
-      manifest['queries'].push({});
-    }
-    const queries = manifest['queries'][0];
-    queries.provider = queries.provider ?? [];
-    for (const authority of PROVIDER_AUTHORITIES) {
-      if (!queries.provider.some((p) => p.$['android:authorities'] === authority)) {
-        queries.provider.push({ $: { 'android:authorities': authority } });
-      }
-    }
-
-    return modConfig;
-  });
-};