cozy-client 27.7.0 → 27.11.0

package/CHANGELOG.md

@@ -3,6 +3,56 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [27.11.0](https://github.com/cozy/cozy-client/compare/v27.10.0...v27.11.0) (2022-01-13)
+
+
+### Features
+
+* Change other_identity_document translations ([aebb1bf](https://github.com/cozy/cozy-client/commit/aebb1bff1721f17baf12b79c92440467b4549257))
+* Move other_revenue in finance theme ([dcb54fa](https://github.com/cozy/cozy-client/commit/dcb54fa11eced184524d6c6c713636e8b7e2f06f))
+
+
+
+
+
+# [27.10.0](https://github.com/cozy/cozy-client/compare/v27.9.0...v27.10.0) (2022-01-12)
+
+
+### Features
+
+* Add activity theme ([44eb0a8](https://github.com/cozy/cozy-client/commit/44eb0a8d8b0bed4a5f081efe7cd42223d7935768))
+
+
+
+
+
+# [27.9.0](https://github.com/cozy/cozy-client/compare/v27.8.0...v27.9.0) (2022-01-12)
+
+**Note:** Version bump only for package cozy-client
+
+
+
+
+
+# [27.8.0](https://github.com/cozy/cozy-client/compare/v27.7.0...v27.8.0) (2022-01-11)
+
+
+### Bug Fixes
+
+* Rebuild `permission.d.ts` to fit CI version ([380db52](https://github.com/cozy/cozy-client/commit/380db528004e9a64b244a99bb238351fac4f2a05))
+* UseQuery returns fetch method ([93e7f3d](https://github.com/cozy/cozy-client/commit/93e7f3d217353003795d43dfedf1397bb64815af))
+
+
+### Features
+
+* Add `react-native-google-safetynet` module as peerDependencies ([cd4b37f](https://github.com/cozy/cozy-client/commit/cd4b37fc3353b702035e773b2b423ef7e7aa3156))
+* Add `react-native-ios11-devicecheck` module  as peerDependencies ([b9ed2e9](https://github.com/cozy/cozy-client/commit/b9ed2e9c42518a50961f5b233b5f6ae1894ed7d6))
+* Add flagship certification mechanism ([fe8474c](https://github.com/cozy/cozy-client/commit/fe8474c3286393c996eb5704184de652aa8028fe))
+
+
+
+
+
 # [27.7.0](https://github.com/cozy/cozy-client/compare/v27.6.5...v27.7.0) (2022-01-03)
 
 

package/dist/CozyClient.js

@@ -83,6 +83,8 @@ var _jsonStableStringify = _interopRequireDefault(require("json-stable-stringify
 
 var _promiseCache = _interopRequireDefault(require("./promise-cache"));
 
+var _flagshipCertification = require("./flagship-certification/flagship-certification");
+
 function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); if (enumerableOnly) symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; }); keys.push.apply(keys, symbols); } return keys; }
 
 function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { ownKeys(Object(source), true).forEach(function (key) { (0, _defineProperty2.default)(target, key, source[key]); }); } else if (Object.getOwnPropertyDescriptors) { Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)); } else { ownKeys(Object(source)).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } } return target; }
@@ -1958,9 +1960,18 @@ var CozyClient = /*#__PURE__*/function () {
                 return stackClient.register();
 
               case 3:
+                if (!stackClient.oauthOptions.shouldRequireFlagshipPermissions) {
+                  _context14.next = 6;
+                  break;
+                }
+
+                _context14.next = 6;
+                return (0, _flagshipCertification.certifyFlagship)(stackClient.oauthOptions.certificationConfig, this);
+
+              case 6:
                 return _context14.abrupt("return", this.authorize(openURLCallback));
 
-              case 4:
+              case 7:
               case "end":
                 return _context14.stop();
             }
@@ -2452,7 +2463,7 @@ var CozyClient = /*#__PURE__*/function () {
 CozyClient.hooks = CozyClient.hooks || {};
 CozyClient.fetchPolicies = _policies.default; //COZY_CLIENT_VERSION_PACKAGE in replaced by babel. See babel config
 
-CozyClient.version = "27.7.0";
+CozyClient.version = "27.11.0";
 
 _microee.default.mixin(CozyClient);
 

package/dist/assets/qualifications.json

@@ -429,6 +429,11 @@
       "sourceCategory": "gov",
       "sourceSubCategory": "sport",
       "subjects": ["permit", "invoice"]
+    },
+    {
+      "label": "other_activity_document",
+      "sourceSubCategory": "sport",
+      "subjects": ["permit", "invoice"]
     }
   ],
   "purposeKnownValues": [

package/dist/flagship-certification/README.md

@@ -0,0 +1,96 @@
+# Flagship certification
+
+Flagship certification is the process of verifying that the current running app is a genuine Cozy application.
+
+This verification is done by querying an app certificate from the app store (Apple AppStore or Google Play) and sending  the resulting certificate to `cozy-stack`. Then `cozy-stack` will be able to an analyze the certificate and conclude if the app is genuine or not.
+
+## Nomenclature
+
+- `flagship`: refers to the Cozy main application
+- `store certification`: process of verifying app's genuineness through the platform's store 
+- `attestation`: result from the `store certification`
+- `challenge`: unique token given to the app by `cozy-stack` that may be encrypted in the `attestation` as a proof of authenticity
+- `nonce`: data type used to store the `challenge` token
+- `SafetyNet`: Google's implementation of the `store certification`
+- `AppAttest`: Apple's implementation of the `store certification`
+
+## Android certification
+
+Android certification is based on [SafetyNet](https://developer.android.com/training/safetynet/index.html).
+
+This process requires to query a `challenge` from `cozy-stack` and to use it to init the `store certification` process through `SafetyNet`. Then the received `attestation` is send to `cozy-stack` for verification.
+
+The resulting `attestation` is in the form of a `JSON Web Signature` that embbed the following `JSON`:
+```json
+{
+    "apkCertificateDigestSha256": [
+        "base64 encoded, SHA-256 hash of the certificate used to sign requesting app="
+    ],
+    "apkDigestSha256": "kNv83tJLFqwliYQ/6HUPCeGkBzLLCX/nvT+EF3OEB2I=",
+    "apkPackageName": "com.package.name.of.requesting.app",
+    "basicIntegrity": true,
+    "ctsProfileMatch": true, 
+    "evaluationType": "BASIC",
+    "nonce": "R2Rra24fVm5xa2Mg",
+    "timestampMs": 9860437986543
+}
+```
+
+The `attestation`'s content is described in the SafetyNet's documentation: https://developer.android.com/training/safetynet/attestation#use-response-server
+
+## iOS certification
+
+iOS certification is based on [AppAttest](https://developer.apple.com/documentation/devicecheck).
+
+This process requires to query a `challenge` from `cozy-stack` and to use it to init the `store certification` process through `AppAttest`. Then the received `attestation` is send to `cozy-stack` for verification.
+
+The resulting `attestation` is in the form of a `base64` token.
+
+The `attestation`'s content is described in the `AppAttest`'s documentation: https://developer.apple.com/documentation/devicecheck/validating_apps_that_connect_to_your_server#3576643
+
+## Client's configuration
+
+In order to configure `flagship` certification on an app, the OAuth property of `cozy-client` must contain `shouldRequireFlagshipPermissions` property set to `true` and `certificationConfig` property filled with required API keys.
+
+Example of `cozy-client` configuration:
+```js
+const client = await initClient(uri, {
+    scope: [
+      'io.cozy.apps'
+    ],
+    oauth: {
+      redirectURI: 'REDIRECT_URI',
+      softwareID: 'YOUR_APP_ID',
+      clientKind: 'mobile',
+      clientName: 'YOUR_APP_NAME',
+      shouldRequireFlagshipPermissions: true,
+      certificationConfig: {
+        androidSafetyNetApiKey: 'YOUR_GOOGLE_SAFETY_NET_API_KEY'
+      }
+    },
+```
+
+## Stacks' configuration
+
+In order to certify an app, the `cozy-stack` needs to have the following data:
+- App's package name
+  - The app's package name is set on the react-native project
+  - It should be put in `flagship.apk_package_names` in the `cozy-stack`'s configuration file
+- iOS app's id
+  - The iOS app's id is the concatenation of the developper team's id and the app's package name as defined in the XCode project
+  - If team's id is `ABCDEFGHIJ` and package name is `io.cozy.some_app` then the resulting app's id should be `ABCDEFGHIJ.io.cozy.some_app`
+  - It should be put in `flagship.apple_app_ids` in the `cozy-stack`'s configuration file
+- Android app's certificate digest
+  - The Android certificate digest can be found in the Google Play app's Console, in `Configuration/App integrity` page
+    - On local dev environment, the dev certificate location is:
+      - On a ReactNative project: `<project_root>/android/app/debug.keystore`
+      - On an Android Studio project:
+        - On OSX: `~/.android/debug.keystore`
+        - On Windows: `%UserProfile%\.android\debug.keystore`
+      - On a Xamarin Project:
+        - On OSX: `~/.local/share/Xamarin/Mono for Android/debug.keystore`
+        - On Windows: `%LocalAppData%\Xamarin\Mono for Android\debug.keystore`
+    - To extract the certificat digest from local dev certificate:
+      - `keytool -list -v -keystore ./android/app/debug.keystore -alias androiddebugkey -storepass android -keypass android | grep "SHA256: " | cut -d " " -f 3 | xxd -r -p | openssl base64`
+  - The certificate digest is the `App signing key certificate` in SHA-256 format converted from HEX to base64
+  - It should be put in `flagship.apk_certificate_digests` in the `cozy-stack`'s configuration file

package/dist/flagship-certification/flagship-certification.js

@@ -0,0 +1,163 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.certifyFlagship = void 0;
+
+var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
+
+var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
+
+var _CozyClient = _interopRequireDefault(require("../CozyClient"));
+
+var _storeAttestation = require("./store-attestation");
+
+/**
+ * Request a challenge from the Stack that can be used to request the app attestation from the app store
+ *
+ * @param {CozyClient} client - the CozyClient instance
+ * @returns {Promise<string>} - the Nonce string returned by the stack
+ */
+var getStackChallenge = /*#__PURE__*/function () {
+  var _ref = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee(client) {
+    var stackClient, result;
+    return _regenerator.default.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            _context.prev = 0;
+            stackClient = client.getStackClient();
+            _context.next = 4;
+            return stackClient.fetchJSON('POST', "/auth/clients/".concat(stackClient.oauthOptions.clientID, "/challenge"), null, {
+              headers: {
+                Authorization: stackClient.registrationAccessTokenToAuthHeader()
+              }
+            });
+
+          case 4:
+            result = _context.sent;
+            return _context.abrupt("return", result.nonce);
+
+          case 8:
+            _context.prev = 8;
+            _context.t0 = _context["catch"](0);
+            throw new Error('[FLAGSHIP_CERTIFICATION] Something went wrong while requesting a challenge from CozyStack:\n' + _context.t0.message);
+
+          case 11:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee, null, [[0, 8]]);
+  }));
+
+  return function getStackChallenge(_x) {
+    return _ref.apply(this, arguments);
+  };
+}();
+/**
+ * Give the app attestation to the Stack
+ *
+ * @param {AttestationResult} appAttestation - the app attestation that was returned by the app store
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CozyClient} client - the CozyClient instance
+ */
+
+
+var giveAppAttestationToStack = /*#__PURE__*/function () {
+  var _ref2 = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee2(appAttestation, nonce, client) {
+    var platform, attestation, keyId, stackClient;
+    return _regenerator.default.wrap(function _callee2$(_context2) {
+      while (1) {
+        switch (_context2.prev = _context2.next) {
+          case 0:
+            _context2.prev = 0;
+            platform = appAttestation.platform, attestation = appAttestation.attestation, keyId = appAttestation.keyId;
+            stackClient = client.getStackClient();
+            _context2.next = 5;
+            return stackClient.fetchJSON('POST', "/auth/clients/".concat(stackClient.oauthOptions.clientID, "/attestation"), {
+              platform: platform,
+              attestation: attestation,
+              challenge: nonce,
+              keyId: keyId
+            }, {
+              headers: {
+                Authorization: stackClient.registrationAccessTokenToAuthHeader()
+              }
+            });
+
+          case 5:
+            _context2.next = 10;
+            break;
+
+          case 7:
+            _context2.prev = 7;
+            _context2.t0 = _context2["catch"](0);
+            throw new Error('[FLAGSHIP_CERTIFICATION] Something went wrong while giving attestation to CozyStack:\n' + _context2.t0.message);
+
+          case 10:
+          case "end":
+            return _context2.stop();
+        }
+      }
+    }, _callee2, null, [[0, 7]]);
+  }));
+
+  return function giveAppAttestationToStack(_x2, _x3, _x4) {
+    return _ref2.apply(this, arguments);
+  };
+}();
+/**
+ * Verify app's identity and integrity so the Stack can trust it
+ * Verification is done on Stack side by using information from the app's store (Google Play or Apple AppStore)
+ *
+ * @param {CertificationConfig} certificationConfig - the required configuration to access the stores API
+ * @param {CozyClient} client - the CozyClient instance
+ */
+
+
+var certifyFlagship = /*#__PURE__*/function () {
+  var _ref3 = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee3(certificationConfig, client) {
+    var stackChallengeNonce, appAttestation;
+    return _regenerator.default.wrap(function _callee3$(_context3) {
+      while (1) {
+        switch (_context3.prev = _context3.next) {
+          case 0:
+            if (certificationConfig) {
+              _context3.next = 2;
+              break;
+            }
+
+            throw new Error('[FLAGSHIP_CERTIFICATION] Certification configuration is not set');
+
+          case 2:
+            _context3.next = 4;
+            return getStackChallenge(client);
+
+          case 4:
+            stackChallengeNonce = _context3.sent;
+            _context3.next = 7;
+            return (0, _storeAttestation.getAppAttestationFromStore)(stackChallengeNonce, certificationConfig);
+
+          case 7:
+            appAttestation = _context3.sent;
+            _context3.next = 10;
+            return giveAppAttestationToStack(appAttestation, stackChallengeNonce, client);
+
+          case 10:
+          case "end":
+            return _context3.stop();
+        }
+      }
+    }, _callee3);
+  }));
+
+  return function certifyFlagship(_x5, _x6) {
+    return _ref3.apply(this, arguments);
+  };
+}();
+
+exports.certifyFlagship = certifyFlagship;

package/dist/flagship-certification/store-attestation.android.js

@@ -0,0 +1,61 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getAppAttestationFromStore = void 0;
+
+var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
+
+var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
+
+var _reactNativeGoogleSafetynet = _interopRequireDefault(require("react-native-google-safetynet"));
+
+//@ts-ignore
+
+/**
+ * Retrieve the app's attestation from the Google Play store
+ *
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CertificationConfig} certificationConfig - Configuration to access the stores certification API
+ * @returns {Promise<AttestationResult>} the app's attestation
+ */
+var getAppAttestationFromStore = /*#__PURE__*/function () {
+  var _ref = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee(nonce, certificationConfig) {
+    var attestationResult;
+    return _regenerator.default.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            _context.prev = 0;
+            _context.next = 3;
+            return _reactNativeGoogleSafetynet.default.sendAttestationRequestJWT(nonce, certificationConfig.androidSafetyNetApiKey);
+
+          case 3:
+            attestationResult = _context.sent;
+            return _context.abrupt("return", {
+              platform: 'android',
+              attestation: attestationResult
+            });
+
+          case 7:
+            _context.prev = 7;
+            _context.t0 = _context["catch"](0);
+            throw new Error('[FLAGSHIP_CERTIFICATION] Something went wrong while requesting an attestation from Google Safetynet:\n' + _context.t0.message);
+
+          case 10:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee, null, [[0, 7]]);
+  }));
+
+  return function getAppAttestationFromStore(_x, _x2) {
+    return _ref.apply(this, arguments);
+  };
+}();
+
+exports.getAppAttestationFromStore = getAppAttestationFromStore;

package/dist/flagship-certification/store-attestation.ios.js

@@ -0,0 +1,67 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getAppAttestationFromStore = void 0;
+
+var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
+
+var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
+
+var _reactNativeIos11Devicecheck = _interopRequireDefault(require("react-native-ios11-devicecheck"));
+
+//@ts-ignore
+
+/**
+ * Retrieve the app's attestation from the Apple AppStore
+ *
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CertificationConfig} certificationConfig - Configuration to access the stores certification API
+ * @returns {Promise<AttestationResult>} the app's attestation
+ */
+var getAppAttestationFromStore = /*#__PURE__*/function () {
+  var _ref = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee(nonce, certificationConfig) {
+    var keyId, attestKey;
+    return _regenerator.default.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            _context.prev = 0;
+            _context.next = 3;
+            return _reactNativeIos11Devicecheck.default.generateKey();
+
+          case 3:
+            keyId = _context.sent;
+            _context.next = 6;
+            return _reactNativeIos11Devicecheck.default.attestKey(keyId, nonce);
+
+          case 6:
+            attestKey = _context.sent;
+            return _context.abrupt("return", {
+              platform: 'ios',
+              attestation: attestKey,
+              keyId: keyId
+            });
+
+          case 10:
+            _context.prev = 10;
+            _context.t0 = _context["catch"](0);
+            throw new Error('[FLAGSHIP_CERTIFICATION] Something went wrong while requesting an attestation from Apple DeviceCheck:\n' + _context.t0.message);
+
+          case 13:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee, null, [[0, 10]]);
+  }));
+
+  return function getAppAttestationFromStore(_x, _x2) {
+    return _ref.apply(this, arguments);
+  };
+}();
+
+exports.getAppAttestationFromStore = getAppAttestationFromStore;

package/dist/flagship-certification/store-attestation.js

@@ -0,0 +1,44 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getAppAttestationFromStore = void 0;
+
+var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
+
+var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
+
+/**
+ * Retrieve the app's attestation from the app's store
+ * /!\ This is a mock implementation that should never be called
+ *
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CertificationConfig} certificationConfig - Configuration to access the stores certification API
+ * @returns {Promise<AttestationResult>} the app's attestation
+ */
+var validateAppMock = /*#__PURE__*/function () {
+  var _ref = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee(nonce, certificationConfig) {
+    return _regenerator.default.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            throw new Error("validateApp can only be called from a React Native container");
+
+          case 1:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee);
+  }));
+
+  return function validateAppMock(_x, _x2) {
+    return _ref.apply(this, arguments);
+  };
+}();
+
+var getAppAttestationFromStore = validateAppMock;
+exports.getAppAttestationFromStore = getAppAttestationFromStore;

package/dist/flagship-certification/typedefs.js

@@ -0,0 +1,24 @@
+/**
+ * A JSON Web Signature
+ * @typedef {string} jws
+ */
+
+/**
+ * A JSON Web Signature
+ * @typedef {string} base64string
+ */
+
+/**
+ * An app attestation from the app store
+ * @typedef {object} AttestationResult
+ * @property {string} platform
+ * @property {jws|base64string} attestation
+ * @property {string} [keyId]
+ */
+
+/**
+ * Configuration to access the stores certification API
+ * @typedef {object} CertificationConfig
+ * @property {string} androidSafetyNetApiKey
+ */
+"use strict";

package/dist/hooks/useQuery.js

@@ -103,8 +103,12 @@ var useQuery = function useQuery(queryDefinition, options) {
       as: as
     });
   }, [as, client]);
+  var fetch = (0, _react.useCallback)(function () {
+    return client.query(definition, options);
+  }, [client, definition, options]);
   return _objectSpread(_objectSpread({}, queryState), {}, {
-    fetchMore: fetchMore
+    fetchMore: fetchMore,
+    fetch: fetch
   });
 };
 

package/dist/hooks/useQuery.spec.jsx

@@ -52,6 +52,46 @@ describe('use query', () => {
     })
   })
 
+  it('should share the same API than ObservableQuery', () => {
+    const {
+      hookResult: {
+        result: { current }
+      }
+    } = setupQuery({
+      queryOptions: {
+        as: 'simpsons'
+      },
+      queryDefinition: () => Q('io.cozy.simpsons')
+    })
+    expect(current).toMatchObject({
+      data: [
+        expect.objectContaining({ name: 'Homer' }),
+        expect.objectContaining({ name: 'Marge' })
+      ],
+      definition: expect.objectContaining({
+        doctype: 'io.cozy.simpsons'
+      })
+    })
+
+    expect(Object.keys(current)).toEqual(
+      expect.objectContaining([
+        'id',
+        'definition',
+        'fetchStatus',
+        'lastFetch',
+        'lastUpdate',
+        'lastErrorUpdate',
+        'lastError',
+        'hasMore',
+        'count',
+        'data',
+        'bookmark',
+        'options',
+        'fetchMore',
+        'fetch'
+      ])
+    )
+  })
   it('should query through the client in context', () => {
     const { client } = setupQuery({
       queryOptions: {

package/dist/models/document/documentTypeData.js

@@ -32,7 +32,7 @@ var buildItemsByLabel = function buildItemsByLabel(labels) {
  */
 
 
-var identityLabels = ['identity_photo', 'national_id_card', 'passport', 'residence_permit', 'family_record_book', 'birth_certificate', 'driver_license', 'citizen_registration_certificate', 'personal_sporting_licence', 'other_identity_document'];
+var identityLabels = ['identity_photo', 'national_id_card', 'passport', 'residence_permit', 'family_record_book', 'birth_certificate', 'driver_license', 'citizen_registration_certificate', 'other_identity_document'];
 /**
  * @type {Array<FamilyLabel>}
  */
@@ -42,7 +42,7 @@ var familyLabels = ['family_record_book', 'birth_certificate', 'wedding', 'pacs'
  * @type {Array<WorkStudyLabels>}
  */
 
-var workStudyLabels = ['diploma', 'work_contract', 'pay_sheet', 'unemployment_benefit', 'pension', 'work_disability_recognition', 'other_revenue', 'gradebook', 'student_card', 'school_attendance_certificate', 'resume', 'motivation_letter', 'other_work_document'];
+var workStudyLabels = ['diploma', 'work_contract', 'pay_sheet', 'unemployment_benefit', 'pension', 'work_disability_recognition', 'gradebook', 'student_card', 'school_attendance_certificate', 'resume', 'motivation_letter', 'other_work_document'];
 /**
  * @type {Array<HealthLabels>}
  */
@@ -58,11 +58,16 @@ var homeLabels = ['phone_invoice', 'isp_invoice', 'telecom_invoice', 'energy_inv
  */
 
 var transportLabels = ['driver_license', 'vehicle_registration', 'car_insurance', 'mechanic_invoice', 'transport_invoice', 'other_transport_document'];
+/**
+ * @type {Array<ActivityLabels>}
+ */
+
+var activityLabels = ['personal_sporting_licence', 'other_activity_document'];
 /**
  * @type {Array<FinanceLabels>}
  */
 
-var financeLabels = ['tax_return', 'tax_notice', 'tax_timetable', 'receipt', 'other_tax_document', 'bank_details', 'bank_statement', 'loan_agreement', 'payment_proof_family_allowance', 'other_bank_document'];
+var financeLabels = ['tax_return', 'tax_notice', 'tax_timetable', 'receipt', 'other_tax_document', 'bank_details', 'bank_statement', 'loan_agreement', 'payment_proof_family_allowance', 'other_bank_document', 'other_revenue'];
 /**
  * @type {Array<InvoiceLabels>}
  */
@@ -107,11 +112,16 @@ var themesList = [{
   defaultItems: ['driver_license']
 }, {
   id: 'theme7',
+  label: 'activity',
+  icon: 'compass',
+  items: buildItemsByLabel(activityLabels)
+}, {
+  id: 'theme8',
   label: 'finance',
   icon: 'bank',
   items: buildItemsByLabel(financeLabels)
 }, {
-  id: 'theme8',
+  id: 'theme9',
   label: 'invoice',
   icon: 'bill',
   items: buildItemsByLabel(invoiceLabels)

package/dist/models/document/locales/en.json

@@ -33,7 +33,7 @@
       "birth_certificate": "Birth certificate",
       "citizen_registration_certificate": "Certificate of citizen registration",
       "driver_license": "Driving license",
-      "other_identity_document": "Other identity",
+      "other_identity_document": "Other document of identity",
       "wedding": "Wedding contract",
       "pacs": "Civil union",
       "divorce": "Divorce",
@@ -98,7 +98,8 @@
       "other_bank_document": "Other banking document",
       "invoices": "Invoices",
       "personal_sporting_licence": "Sporting licence",
-      "other_invoice": "Other invoice"
+      "other_invoice": "Other invoice",
+      "other_activity_document": "Other sports document"
     },
     "themes": {
       "identity": "Identity",
@@ -110,7 +111,8 @@
       "invoice": "Invoice",
       "others": "Others",
       "undefined": "Undefined",
-      "finance": "Finance"
+      "finance": "Finance",
+      "activity": "Activities"
     }
   }
 }

package/dist/models/document/locales/fr.json

@@ -33,7 +33,7 @@
       "birth_certificate": "Certificat de naissance",
       "citizen_registration_certificate": "Attestation de recensement citoyen",
       "driver_license": "Permis",
-      "other_identity_document": "Autre identité",
+      "other_identity_document": "Autre document d'identité",
       "wedding": "Contrat de mariage",
       "pacs": "Attestation de PACS",
       "divorce": "Attestation de divorce",
@@ -98,7 +98,8 @@
       "other_bank_document": "Autre document bancaire",
       "invoices": "Factures",
       "personal_sporting_licence": "Licences sportives",
-      "other_invoice": "Autre facture"
+      "other_invoice": "Autre facture",
+      "other_activity_document": "Autre document sportif"
     },
     "themes": {
       "identity": "Identité",
@@ -110,7 +111,8 @@
       "invoice": "Factures",
       "others": "Autres",
       "undefined": "Indéfini",
-      "finance": "Finances"
+      "finance": "Finances",
+      "activity": "Activités & loisirs"
     }
   }
 }

package/dist/types.js

@@ -280,7 +280,7 @@ var _dsl = require("./queries/dsl");
  *
  * @typedef {'family_record_book'|'birth_certificate'|'wedding'|'pacs'|'divorce'|'large_family_card'|'caf'|'other_family_document'|'payment_proof_family_allowance'} FamilyLabel
  *
- * @typedef {'diploma'|'work_contract'|'pay_sheet'|'unemployment_benefit'|'pension'|'other_revenue'|'gradebook'|'student_card'|'resume'|'motivation_letter'|'other_work_document'|'work_disability_recognition'|'school_attendance_certificate'} WorkStudyLabels
+ * @typedef {'diploma'|'work_contract'|'pay_sheet'|'unemployment_benefit'|'pension'|'gradebook'|'student_card'|'resume'|'motivation_letter'|'other_work_document'|'work_disability_recognition'|'school_attendance_certificate'} WorkStudyLabels
  *
  * @typedef {'health_certificate'|'health_book'|'national_health_insurance_card'|'health_insurance_card'|'prescription'|'health_invoice'|'national_health_insurance_right_certificate'|'work_disability_recognition'|'pregnancy_medical_certificate'|'other_health_document'} HealthLabels
  *
@@ -288,11 +288,13 @@ var _dsl = require("./queries/dsl");
  *
  * @typedef {'driver_license'|'vehicle_registration'|'car_insurance'|'mechanic_invoice'|'transport_invoice'|'other_transport_document'} TransportLabels
  *
- * @typedef {'tax_return'|'tax_notice'|'tax_timetable'|'receipt'|'other_tax_document'|'bank_details'|'bank_statement'|'loan_agreement'|'other_bank_document'|'payment_proof_family_allowance'} FinanceLabels
+ * @typedef {'tax_return'|'tax_notice'|'tax_timetable'|'receipt'|'other_tax_document'|'bank_details'|'bank_statement'|'loan_agreement'|'other_bank_document'|'payment_proof_family_allowance'|'other_revenue'} FinanceLabels
  *
  * @typedef {'phone_invoice'|'isp_invoice'|'telecom_invoice'|'energy_invoice'|'water_invoice'|'appliance_invoice'|'web_service_invoice'|'restaurant_invoice'|'work_invoice'|'transport_invoice'|'health_invoice'|'other_invoice'} InvoiceLabels
  *
- * @typedef {IdentityLabel|FamilyLabel|WorkStudyLabels|HealthLabels|HomeLabels|TransportLabels|FinanceLabels|InvoiceLabels} ItemsLabels
+ * @typedef {'personal_sporting_licence'|'other_activity_document'} ActivityLabels
+ *
+ * @typedef {IdentityLabel|FamilyLabel|WorkStudyLabels|HealthLabels|HomeLabels|TransportLabels|FinanceLabels|InvoiceLabels|ActivityLabels} ItemsLabels
  */
 var _default = {};
 exports.default = _default;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cozy-client",
-  "version": "27.7.0",
+  "version": "27.11.0",
   "license": "MIT",
   "main": "dist/index.node.js",
   "browser": "dist/index.js",
@@ -21,7 +21,7 @@
     "cozy-device-helper": "^1.12.0",
     "cozy-flags": "2.7.1",
     "cozy-logger": "^1.6.0",
-    "cozy-stack-client": "^27.6.5",
+    "cozy-stack-client": "^27.9.0",
     "json-stable-stringify": "^1.0.1",
     "lodash": "^4.17.13",
     "microee": "^0.0.6",
@@ -66,8 +66,10 @@
     "cozy-ui": ">34.0.0",
     "react": "^16.7.0",
     "react-native": "^0.65.0",
-    "react-native-inappbrowser-reborn": "^3.5.1"
+    "react-native-google-safetynet": "0.0.4",
+    "react-native-inappbrowser-reborn": "^3.5.1",
+    "react-native-ios11-devicecheck": "https://github.com/cozy/react-native-devicecheck#app-attest-v0.1"
   },
   "sideEffects": false,
-  "gitHead": "b301a3deef6018f8aa91ffcbcf1ad660b68711cd"
+  "gitHead": "97bc6226b59db1d7c41b96cffc0d48ce68d182ef"
 }

package/types/flagship-certification/flagship-certification.d.ts

@@ -0,0 +1,2 @@
+export function certifyFlagship(certificationConfig: CertificationConfig, client: CozyClient): Promise<void>;
+import CozyClient from "../CozyClient";

package/types/flagship-certification/store-attestation.android.d.ts

@@ -0,0 +1 @@
+export function getAppAttestationFromStore(nonce: string, certificationConfig: CertificationConfig): Promise<AttestationResult>;

package/types/flagship-certification/store-attestation.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Retrieve the app's attestation from the app's store
+ * /!\ This is a mock implementation that should never be called
+ *
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CertificationConfig} certificationConfig - Configuration to access the stores certification API
+ * @returns {Promise<AttestationResult>} the app's attestation
+ */
+export function getAppAttestationFromStore(nonce: string, certificationConfig: CertificationConfig): Promise<AttestationResult>;

package/types/flagship-certification/store-attestation.ios.d.ts

@@ -0,0 +1 @@
+export function getAppAttestationFromStore(nonce: string, certificationConfig: CertificationConfig): Promise<AttestationResult>;

package/types/flagship-certification/typedefs.d.ts

@@ -0,0 +1,22 @@
+/**
+ * A JSON Web Signature
+ */
+type jws = string;
+/**
+ * A JSON Web Signature
+ */
+type base64string = string;
+/**
+ * An app attestation from the app store
+ */
+type AttestationResult = {
+    platform: string;
+    attestation: jws | base64string;
+    keyId?: string;
+};
+/**
+ * Configuration to access the stores certification API
+ */
+type CertificationConfig = {
+    androidSafetyNetApiKey: string;
+};

package/types/models/permission.d.ts

@@ -52,7 +52,7 @@ export type Document = {
     _type: string;
     type: string;
 };
-export type PermissionVerb = "DELETE" | "PUT" | "POST" | "GET" | "ALL" | "PATCH";
+export type PermissionVerb = "POST" | "DELETE" | "PUT" | "GET" | "ALL" | "PATCH";
 export type PermissionItem = {
     /**
      * - ALL, GET, PUT, PATCH, DELETE, POST…

package/types/types.d.ts

@@ -317,11 +317,12 @@ export type QualificationAttributes = {
 };
 export type IdentityLabel = "identity_photo" | "national_id_card" | "passport" | "residence_permit" | "family_record_book" | "birth_certificate" | "driver_license" | "other_identity_document" | "citizen_registration_certificate" | "personal_sporting_licence";
 export type FamilyLabel = "family_record_book" | "birth_certificate" | "wedding" | "pacs" | "divorce" | "large_family_card" | "caf" | "other_family_document" | "payment_proof_family_allowance";
-export type WorkStudyLabels = "resume" | "diploma" | "work_contract" | "pay_sheet" | "unemployment_benefit" | "pension" | "other_revenue" | "gradebook" | "student_card" | "motivation_letter" | "other_work_document" | "work_disability_recognition" | "school_attendance_certificate";
+export type WorkStudyLabels = "resume" | "diploma" | "work_contract" | "pay_sheet" | "unemployment_benefit" | "pension" | "gradebook" | "student_card" | "motivation_letter" | "other_work_document" | "work_disability_recognition" | "school_attendance_certificate";
 export type HealthLabels = "work_disability_recognition" | "health_certificate" | "health_book" | "national_health_insurance_card" | "health_insurance_card" | "prescription" | "health_invoice" | "national_health_insurance_right_certificate" | "pregnancy_medical_certificate" | "other_health_document";
 export type HomeLabels = "phone_invoice" | "isp_invoice" | "telecom_invoice" | "energy_invoice" | "water_invoice" | "house_sale_agreeement" | "building_permit" | "technical_diagnostic_record" | "lease" | "rent_receipt" | "house_insurance" | "work_quote" | "work_invoice" | "other_house_document" | "unfit_for_habitation_declaration" | "accommodation_proof";
 export type TransportLabels = "driver_license" | "vehicle_registration" | "car_insurance" | "mechanic_invoice" | "transport_invoice" | "other_transport_document";
-export type FinanceLabels = "payment_proof_family_allowance" | "tax_return" | "tax_notice" | "tax_timetable" | "receipt" | "other_tax_document" | "bank_details" | "bank_statement" | "loan_agreement" | "other_bank_document";
+export type FinanceLabels = "payment_proof_family_allowance" | "tax_return" | "tax_notice" | "tax_timetable" | "receipt" | "other_tax_document" | "bank_details" | "bank_statement" | "loan_agreement" | "other_bank_document" | "other_revenue";
 export type InvoiceLabels = "health_invoice" | "phone_invoice" | "isp_invoice" | "telecom_invoice" | "energy_invoice" | "water_invoice" | "work_invoice" | "transport_invoice" | "appliance_invoice" | "web_service_invoice" | "restaurant_invoice" | "other_invoice";
-export type ItemsLabels = "resume" | "identity_photo" | "national_id_card" | "passport" | "residence_permit" | "family_record_book" | "birth_certificate" | "driver_license" | "other_identity_document" | "citizen_registration_certificate" | "personal_sporting_licence" | "wedding" | "pacs" | "divorce" | "large_family_card" | "caf" | "other_family_document" | "payment_proof_family_allowance" | "diploma" | "work_contract" | "pay_sheet" | "unemployment_benefit" | "pension" | "other_revenue" | "gradebook" | "student_card" | "motivation_letter" | "other_work_document" | "work_disability_recognition" | "school_attendance_certificate" | "health_certificate" | "health_book" | "national_health_insurance_card" | "health_insurance_card" | "prescription" | "health_invoice" | "national_health_insurance_right_certificate" | "pregnancy_medical_certificate" | "other_health_document" | "phone_invoice" | "isp_invoice" | "telecom_invoice" | "energy_invoice" | "water_invoice" | "house_sale_agreeement" | "building_permit" | "technical_diagnostic_record" | "lease" | "rent_receipt" | "house_insurance" | "work_quote" | "work_invoice" | "other_house_document" | "unfit_for_habitation_declaration" | "accommodation_proof" | "vehicle_registration" | "car_insurance" | "mechanic_invoice" | "transport_invoice" | "other_transport_document" | "tax_return" | "tax_notice" | "tax_timetable" | "receipt" | "other_tax_document" | "bank_details" | "bank_statement" | "loan_agreement" | "other_bank_document" | "appliance_invoice" | "web_service_invoice" | "restaurant_invoice" | "other_invoice";
+export type ActivityLabels = "personal_sporting_licence" | "other_activity_document";
+export type ItemsLabels = "resume" | "identity_photo" | "national_id_card" | "passport" | "residence_permit" | "family_record_book" | "birth_certificate" | "driver_license" | "other_identity_document" | "citizen_registration_certificate" | "personal_sporting_licence" | "wedding" | "pacs" | "divorce" | "large_family_card" | "caf" | "other_family_document" | "payment_proof_family_allowance" | "diploma" | "work_contract" | "pay_sheet" | "unemployment_benefit" | "pension" | "gradebook" | "student_card" | "motivation_letter" | "other_work_document" | "work_disability_recognition" | "school_attendance_certificate" | "health_certificate" | "health_book" | "national_health_insurance_card" | "health_insurance_card" | "prescription" | "health_invoice" | "national_health_insurance_right_certificate" | "pregnancy_medical_certificate" | "other_health_document" | "phone_invoice" | "isp_invoice" | "telecom_invoice" | "energy_invoice" | "water_invoice" | "house_sale_agreeement" | "building_permit" | "technical_diagnostic_record" | "lease" | "rent_receipt" | "house_insurance" | "work_quote" | "work_invoice" | "other_house_document" | "unfit_for_habitation_declaration" | "accommodation_proof" | "vehicle_registration" | "car_insurance" | "mechanic_invoice" | "transport_invoice" | "other_transport_document" | "tax_return" | "tax_notice" | "tax_timetable" | "receipt" | "other_tax_document" | "bank_details" | "bank_statement" | "loan_agreement" | "other_bank_document" | "other_revenue" | "appliance_invoice" | "web_service_invoice" | "restaurant_invoice" | "other_invoice" | "other_activity_document";
 import { QueryDefinition } from "./queries/dsl";