cozy-client 27.7.0 → 27.8.0

package/CHANGELOG.md

@@ -3,6 +3,25 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+# [27.8.0](https://github.com/cozy/cozy-client/compare/v27.7.0...v27.8.0) (2022-01-11)
+
+
+### Bug Fixes
+
+* Rebuild `permission.d.ts` to fit CI version ([380db52](https://github.com/cozy/cozy-client/commit/380db528004e9a64b244a99bb238351fac4f2a05))
+* UseQuery returns fetch method ([93e7f3d](https://github.com/cozy/cozy-client/commit/93e7f3d217353003795d43dfedf1397bb64815af))
+
+
+### Features
+
+* Add `react-native-google-safetynet` module as peerDependencies ([cd4b37f](https://github.com/cozy/cozy-client/commit/cd4b37fc3353b702035e773b2b423ef7e7aa3156))
+* Add `react-native-ios11-devicecheck` module  as peerDependencies ([b9ed2e9](https://github.com/cozy/cozy-client/commit/b9ed2e9c42518a50961f5b233b5f6ae1894ed7d6))
+* Add flagship certification mechanism ([fe8474c](https://github.com/cozy/cozy-client/commit/fe8474c3286393c996eb5704184de652aa8028fe))
+
+
+
+
+
 # [27.7.0](https://github.com/cozy/cozy-client/compare/v27.6.5...v27.7.0) (2022-01-03)
 
 

package/dist/CozyClient.js

@@ -83,6 +83,8 @@ var _jsonStableStringify = _interopRequireDefault(require("json-stable-stringify
 
 var _promiseCache = _interopRequireDefault(require("./promise-cache"));
 
+var _flagshipCertification = require("./flagship-certification/flagship-certification");
+
 function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); if (enumerableOnly) symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; }); keys.push.apply(keys, symbols); } return keys; }
 
 function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { ownKeys(Object(source), true).forEach(function (key) { (0, _defineProperty2.default)(target, key, source[key]); }); } else if (Object.getOwnPropertyDescriptors) { Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)); } else { ownKeys(Object(source)).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } } return target; }
@@ -1958,9 +1960,18 @@ var CozyClient = /*#__PURE__*/function () {
                 return stackClient.register();
 
               case 3:
+                if (!stackClient.oauthOptions.shouldRequireFlagshipPermissions) {
+                  _context14.next = 6;
+                  break;
+                }
+
+                _context14.next = 6;
+                return (0, _flagshipCertification.certifyFlagship)(stackClient.oauthOptions.certificationConfig, this);
+
+              case 6:
                 return _context14.abrupt("return", this.authorize(openURLCallback));
 
-              case 4:
+              case 7:
               case "end":
                 return _context14.stop();
             }
@@ -2452,7 +2463,7 @@ var CozyClient = /*#__PURE__*/function () {
 CozyClient.hooks = CozyClient.hooks || {};
 CozyClient.fetchPolicies = _policies.default; //COZY_CLIENT_VERSION_PACKAGE in replaced by babel. See babel config
 
-CozyClient.version = "27.7.0";
+CozyClient.version = "27.8.0";
 
 _microee.default.mixin(CozyClient);
 

package/dist/flagship-certification/README.md

@@ -0,0 +1,96 @@
+# Flagship certification
+
+Flagship certification is the process of verifying that the current running app is a genuine Cozy application.
+
+This verification is done by querying an app certificate from the app store (Apple AppStore or Google Play) and sending  the resulting certificate to `cozy-stack`. Then `cozy-stack` will be able to an analyze the certificate and conclude if the app is genuine or not.
+
+## Nomenclature
+
+- `flagship`: refers to the Cozy main application
+- `store certification`: process of verifying app's genuineness through the platform's store 
+- `attestation`: result from the `store certification`
+- `challenge`: unique token given to the app by `cozy-stack` that may be encrypted in the `attestation` as a proof of authenticity
+- `nonce`: data type used to store the `challenge` token
+- `SafetyNet`: Google's implementation of the `store certification`
+- `AppAttest`: Apple's implementation of the `store certification`
+
+## Android certification
+
+Android certification is based on [SafetyNet](https://developer.android.com/training/safetynet/index.html).
+
+This process requires to query a `challenge` from `cozy-stack` and to use it to init the `store certification` process through `SafetyNet`. Then the received `attestation` is send to `cozy-stack` for verification.
+
+The resulting `attestation` is in the form of a `JSON Web Signature` that embbed the following `JSON`:
+```json
+{
+    "apkCertificateDigestSha256": [
+        "base64 encoded, SHA-256 hash of the certificate used to sign requesting app="
+    ],
+    "apkDigestSha256": "kNv83tJLFqwliYQ/6HUPCeGkBzLLCX/nvT+EF3OEB2I=",
+    "apkPackageName": "com.package.name.of.requesting.app",
+    "basicIntegrity": true,
+    "ctsProfileMatch": true, 
+    "evaluationType": "BASIC",
+    "nonce": "R2Rra24fVm5xa2Mg",
+    "timestampMs": 9860437986543
+}
+```
+
+The `attestation`'s content is described in the SafetyNet's documentation: https://developer.android.com/training/safetynet/attestation#use-response-server
+
+## iOS certification
+
+iOS certification is based on [AppAttest](https://developer.apple.com/documentation/devicecheck).
+
+This process requires to query a `challenge` from `cozy-stack` and to use it to init the `store certification` process through `AppAttest`. Then the received `attestation` is send to `cozy-stack` for verification.
+
+The resulting `attestation` is in the form of a `base64` token.
+
+The `attestation`'s content is described in the `AppAttest`'s documentation: https://developer.apple.com/documentation/devicecheck/validating_apps_that_connect_to_your_server#3576643
+
+## Client's configuration
+
+In order to configure `flagship` certification on an app, the OAuth property of `cozy-client` must contain `shouldRequireFlagshipPermissions` property set to `true` and `certificationConfig` property filled with required API keys.
+
+Example of `cozy-client` configuration:
+```js
+const client = await initClient(uri, {
+    scope: [
+      'io.cozy.apps'
+    ],
+    oauth: {
+      redirectURI: 'REDIRECT_URI',
+      softwareID: 'YOUR_APP_ID',
+      clientKind: 'mobile',
+      clientName: 'YOUR_APP_NAME',
+      shouldRequireFlagshipPermissions: true,
+      certificationConfig: {
+        androidSafetyNetApiKey: 'YOUR_GOOGLE_SAFETY_NET_API_KEY'
+      }
+    },
+```
+
+## Stacks' configuration
+
+In order to certify an app, the `cozy-stack` needs to have the following data:
+- App's package name
+  - The app's package name is set on the react-native project
+  - It should be put in `flagship.apk_package_names` in the `cozy-stack`'s configuration file
+- iOS app's id
+  - The iOS app's id is the concatenation of the developper team's id and the app's package name as defined in the XCode project
+  - If team's id is `ABCDEFGHIJ` and package name is `io.cozy.some_app` then the resulting app's id should be `ABCDEFGHIJ.io.cozy.some_app`
+  - It should be put in `flagship.apple_app_ids` in the `cozy-stack`'s configuration file
+- Android app's certificate digest
+  - The Android certificate digest can be found in the Google Play app's Console, in `Configuration/App integrity` page
+    - On local dev environment, the dev certificate location is:
+      - On a ReactNative project: `<project_root>/android/app/debug.keystore`
+      - On an Android Studio project:
+        - On OSX: `~/.android/debug.keystore`
+        - On Windows: `%UserProfile%\.android\debug.keystore`
+      - On a Xamarin Project:
+        - On OSX: `~/.local/share/Xamarin/Mono for Android/debug.keystore`
+        - On Windows: `%LocalAppData%\Xamarin\Mono for Android\debug.keystore`
+    - To extract the certificat digest from local dev certificate:
+      - `keytool -list -v -keystore ./android/app/debug.keystore -alias androiddebugkey -storepass android -keypass android | grep "SHA256: " | cut -d " " -f 3 | xxd -r -p | openssl base64`
+  - The certificate digest is the `App signing key certificate` in SHA-256 format converted from HEX to base64
+  - It should be put in `flagship.apk_certificate_digests` in the `cozy-stack`'s configuration file

package/dist/flagship-certification/flagship-certification.js

@@ -0,0 +1,163 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.certifyFlagship = void 0;
+
+var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
+
+var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
+
+var _CozyClient = _interopRequireDefault(require("../CozyClient"));
+
+var _storeAttestation = require("./store-attestation");
+
+/**
+ * Request a challenge from the Stack that can be used to request the app attestation from the app store
+ *
+ * @param {CozyClient} client - the CozyClient instance
+ * @returns {Promise<string>} - the Nonce string returned by the stack
+ */
+var getStackChallenge = /*#__PURE__*/function () {
+  var _ref = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee(client) {
+    var stackClient, result;
+    return _regenerator.default.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            _context.prev = 0;
+            stackClient = client.getStackClient();
+            _context.next = 4;
+            return stackClient.fetchJSON('POST', "/auth/clients/".concat(stackClient.oauthOptions.clientID, "/challenge"), null, {
+              headers: {
+                Authorization: stackClient.registrationAccessTokenToAuthHeader()
+              }
+            });
+
+          case 4:
+            result = _context.sent;
+            return _context.abrupt("return", result.nonce);
+
+          case 8:
+            _context.prev = 8;
+            _context.t0 = _context["catch"](0);
+            throw new Error('[FLAGSHIP_CERTIFICATION] Something went wrong while requesting a challenge from CozyStack:\n' + _context.t0.message);
+
+          case 11:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee, null, [[0, 8]]);
+  }));
+
+  return function getStackChallenge(_x) {
+    return _ref.apply(this, arguments);
+  };
+}();
+/**
+ * Give the app attestation to the Stack
+ *
+ * @param {AttestationResult} appAttestation - the app attestation that was returned by the app store
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CozyClient} client - the CozyClient instance
+ */
+
+
+var giveAppAttestationToStack = /*#__PURE__*/function () {
+  var _ref2 = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee2(appAttestation, nonce, client) {
+    var platform, attestation, keyId, stackClient;
+    return _regenerator.default.wrap(function _callee2$(_context2) {
+      while (1) {
+        switch (_context2.prev = _context2.next) {
+          case 0:
+            _context2.prev = 0;
+            platform = appAttestation.platform, attestation = appAttestation.attestation, keyId = appAttestation.keyId;
+            stackClient = client.getStackClient();
+            _context2.next = 5;
+            return stackClient.fetchJSON('POST', "/auth/clients/".concat(stackClient.oauthOptions.clientID, "/attestation"), {
+              platform: platform,
+              attestation: attestation,
+              challenge: nonce,
+              keyId: keyId
+            }, {
+              headers: {
+                Authorization: stackClient.registrationAccessTokenToAuthHeader()
+              }
+            });
+
+          case 5:
+            _context2.next = 10;
+            break;
+
+          case 7:
+            _context2.prev = 7;
+            _context2.t0 = _context2["catch"](0);
+            throw new Error('[FLAGSHIP_CERTIFICATION] Something went wrong while giving attestation to CozyStack:\n' + _context2.t0.message);
+
+          case 10:
+          case "end":
+            return _context2.stop();
+        }
+      }
+    }, _callee2, null, [[0, 7]]);
+  }));
+
+  return function giveAppAttestationToStack(_x2, _x3, _x4) {
+    return _ref2.apply(this, arguments);
+  };
+}();
+/**
+ * Verify app's identity and integrity so the Stack can trust it
+ * Verification is done on Stack side by using information from the app's store (Google Play or Apple AppStore)
+ *
+ * @param {CertificationConfig} certificationConfig - the required configuration to access the stores API
+ * @param {CozyClient} client - the CozyClient instance
+ */
+
+
+var certifyFlagship = /*#__PURE__*/function () {
+  var _ref3 = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee3(certificationConfig, client) {
+    var stackChallengeNonce, appAttestation;
+    return _regenerator.default.wrap(function _callee3$(_context3) {
+      while (1) {
+        switch (_context3.prev = _context3.next) {
+          case 0:
+            if (certificationConfig) {
+              _context3.next = 2;
+              break;
+            }
+
+            throw new Error('[FLAGSHIP_CERTIFICATION] Certification configuration is not set');
+
+          case 2:
+            _context3.next = 4;
+            return getStackChallenge(client);
+
+          case 4:
+            stackChallengeNonce = _context3.sent;
+            _context3.next = 7;
+            return (0, _storeAttestation.getAppAttestationFromStore)(stackChallengeNonce, certificationConfig);
+
+          case 7:
+            appAttestation = _context3.sent;
+            _context3.next = 10;
+            return giveAppAttestationToStack(appAttestation, stackChallengeNonce, client);
+
+          case 10:
+          case "end":
+            return _context3.stop();
+        }
+      }
+    }, _callee3);
+  }));
+
+  return function certifyFlagship(_x5, _x6) {
+    return _ref3.apply(this, arguments);
+  };
+}();
+
+exports.certifyFlagship = certifyFlagship;

package/dist/flagship-certification/store-attestation.android.js

@@ -0,0 +1,61 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getAppAttestationFromStore = void 0;
+
+var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
+
+var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
+
+var _reactNativeGoogleSafetynet = _interopRequireDefault(require("react-native-google-safetynet"));
+
+//@ts-ignore
+
+/**
+ * Retrieve the app's attestation from the Google Play store
+ *
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CertificationConfig} certificationConfig - Configuration to access the stores certification API
+ * @returns {Promise<AttestationResult>} the app's attestation
+ */
+var getAppAttestationFromStore = /*#__PURE__*/function () {
+  var _ref = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee(nonce, certificationConfig) {
+    var attestationResult;
+    return _regenerator.default.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            _context.prev = 0;
+            _context.next = 3;
+            return _reactNativeGoogleSafetynet.default.sendAttestationRequestJWT(nonce, certificationConfig.androidSafetyNetApiKey);
+
+          case 3:
+            attestationResult = _context.sent;
+            return _context.abrupt("return", {
+              platform: 'android',
+              attestation: attestationResult
+            });
+
+          case 7:
+            _context.prev = 7;
+            _context.t0 = _context["catch"](0);
+            throw new Error('[FLAGSHIP_CERTIFICATION] Something went wrong while requesting an attestation from Google Safetynet:\n' + _context.t0.message);
+
+          case 10:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee, null, [[0, 7]]);
+  }));
+
+  return function getAppAttestationFromStore(_x, _x2) {
+    return _ref.apply(this, arguments);
+  };
+}();
+
+exports.getAppAttestationFromStore = getAppAttestationFromStore;

package/dist/flagship-certification/store-attestation.ios.js

@@ -0,0 +1,67 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getAppAttestationFromStore = void 0;
+
+var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
+
+var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
+
+var _reactNativeIos11Devicecheck = _interopRequireDefault(require("react-native-ios11-devicecheck"));
+
+//@ts-ignore
+
+/**
+ * Retrieve the app's attestation from the Apple AppStore
+ *
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CertificationConfig} certificationConfig - Configuration to access the stores certification API
+ * @returns {Promise<AttestationResult>} the app's attestation
+ */
+var getAppAttestationFromStore = /*#__PURE__*/function () {
+  var _ref = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee(nonce, certificationConfig) {
+    var keyId, attestKey;
+    return _regenerator.default.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            _context.prev = 0;
+            _context.next = 3;
+            return _reactNativeIos11Devicecheck.default.generateKey();
+
+          case 3:
+            keyId = _context.sent;
+            _context.next = 6;
+            return _reactNativeIos11Devicecheck.default.attestKey(keyId, nonce);
+
+          case 6:
+            attestKey = _context.sent;
+            return _context.abrupt("return", {
+              platform: 'ios',
+              attestation: attestKey,
+              keyId: keyId
+            });
+
+          case 10:
+            _context.prev = 10;
+            _context.t0 = _context["catch"](0);
+            throw new Error('[FLAGSHIP_CERTIFICATION] Something went wrong while requesting an attestation from Apple DeviceCheck:\n' + _context.t0.message);
+
+          case 13:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee, null, [[0, 10]]);
+  }));
+
+  return function getAppAttestationFromStore(_x, _x2) {
+    return _ref.apply(this, arguments);
+  };
+}();
+
+exports.getAppAttestationFromStore = getAppAttestationFromStore;

package/dist/flagship-certification/store-attestation.js

@@ -0,0 +1,44 @@
+"use strict";
+
+var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.getAppAttestationFromStore = void 0;
+
+var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
+
+var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
+
+/**
+ * Retrieve the app's attestation from the app's store
+ * /!\ This is a mock implementation that should never be called
+ *
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CertificationConfig} certificationConfig - Configuration to access the stores certification API
+ * @returns {Promise<AttestationResult>} the app's attestation
+ */
+var validateAppMock = /*#__PURE__*/function () {
+  var _ref = (0, _asyncToGenerator2.default)( /*#__PURE__*/_regenerator.default.mark(function _callee(nonce, certificationConfig) {
+    return _regenerator.default.wrap(function _callee$(_context) {
+      while (1) {
+        switch (_context.prev = _context.next) {
+          case 0:
+            throw new Error("validateApp can only be called from a React Native container");
+
+          case 1:
+          case "end":
+            return _context.stop();
+        }
+      }
+    }, _callee);
+  }));
+
+  return function validateAppMock(_x, _x2) {
+    return _ref.apply(this, arguments);
+  };
+}();
+
+var getAppAttestationFromStore = validateAppMock;
+exports.getAppAttestationFromStore = getAppAttestationFromStore;

package/dist/flagship-certification/typedefs.js

@@ -0,0 +1,24 @@
+/**
+ * A JSON Web Signature
+ * @typedef {string} jws
+ */
+
+/**
+ * A JSON Web Signature
+ * @typedef {string} base64string
+ */
+
+/**
+ * An app attestation from the app store
+ * @typedef {object} AttestationResult
+ * @property {string} platform
+ * @property {jws|base64string} attestation
+ * @property {string} [keyId]
+ */
+
+/**
+ * Configuration to access the stores certification API
+ * @typedef {object} CertificationConfig
+ * @property {string} androidSafetyNetApiKey
+ */
+"use strict";

package/dist/hooks/useQuery.js

@@ -103,8 +103,12 @@ var useQuery = function useQuery(queryDefinition, options) {
       as: as
     });
   }, [as, client]);
+  var fetch = (0, _react.useCallback)(function () {
+    return client.query(definition, options);
+  }, [client, definition, options]);
   return _objectSpread(_objectSpread({}, queryState), {}, {
-    fetchMore: fetchMore
+    fetchMore: fetchMore,
+    fetch: fetch
   });
 };
 

package/dist/hooks/useQuery.spec.jsx

@@ -52,6 +52,46 @@ describe('use query', () => {
     })
   })
 
+  it('should share the same API than ObservableQuery', () => {
+    const {
+      hookResult: {
+        result: { current }
+      }
+    } = setupQuery({
+      queryOptions: {
+        as: 'simpsons'
+      },
+      queryDefinition: () => Q('io.cozy.simpsons')
+    })
+    expect(current).toMatchObject({
+      data: [
+        expect.objectContaining({ name: 'Homer' }),
+        expect.objectContaining({ name: 'Marge' })
+      ],
+      definition: expect.objectContaining({
+        doctype: 'io.cozy.simpsons'
+      })
+    })
+
+    expect(Object.keys(current)).toEqual(
+      expect.objectContaining([
+        'id',
+        'definition',
+        'fetchStatus',
+        'lastFetch',
+        'lastUpdate',
+        'lastErrorUpdate',
+        'lastError',
+        'hasMore',
+        'count',
+        'data',
+        'bookmark',
+        'options',
+        'fetchMore',
+        'fetch'
+      ])
+    )
+  })
   it('should query through the client in context', () => {
     const { client } = setupQuery({
       queryOptions: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cozy-client",
-  "version": "27.7.0",
+  "version": "27.8.0",
   "license": "MIT",
   "main": "dist/index.node.js",
   "browser": "dist/index.js",
@@ -66,8 +66,10 @@
     "cozy-ui": ">34.0.0",
     "react": "^16.7.0",
     "react-native": "^0.65.0",
-    "react-native-inappbrowser-reborn": "^3.5.1"
+    "react-native-google-safetynet": "0.0.4",
+    "react-native-inappbrowser-reborn": "^3.5.1",
+    "react-native-ios11-devicecheck": "https://github.com/cozy/react-native-devicecheck#app-attest-v0.1"
   },
   "sideEffects": false,
-  "gitHead": "b301a3deef6018f8aa91ffcbcf1ad660b68711cd"
+  "gitHead": "503b86d3aef51c8f9b684dbcffcdad49bd41ca5e"
 }

package/types/flagship-certification/flagship-certification.d.ts

@@ -0,0 +1,2 @@
+export function certifyFlagship(certificationConfig: CertificationConfig, client: CozyClient): Promise<void>;
+import CozyClient from "../CozyClient";

package/types/flagship-certification/store-attestation.android.d.ts

@@ -0,0 +1 @@
+export function getAppAttestationFromStore(nonce: string, certificationConfig: CertificationConfig): Promise<AttestationResult>;

package/types/flagship-certification/store-attestation.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Retrieve the app's attestation from the app's store
+ * /!\ This is a mock implementation that should never be called
+ *
+ * @param {string} nonce - the Nonce string retrieved from the stack
+ * @param {CertificationConfig} certificationConfig - Configuration to access the stores certification API
+ * @returns {Promise<AttestationResult>} the app's attestation
+ */
+export function getAppAttestationFromStore(nonce: string, certificationConfig: CertificationConfig): Promise<AttestationResult>;

package/types/flagship-certification/store-attestation.ios.d.ts

@@ -0,0 +1 @@
+export function getAppAttestationFromStore(nonce: string, certificationConfig: CertificationConfig): Promise<AttestationResult>;

package/types/flagship-certification/typedefs.d.ts

@@ -0,0 +1,22 @@
+/**
+ * A JSON Web Signature
+ */
+type jws = string;
+/**
+ * A JSON Web Signature
+ */
+type base64string = string;
+/**
+ * An app attestation from the app store
+ */
+type AttestationResult = {
+    platform: string;
+    attestation: jws | base64string;
+    keyId?: string;
+};
+/**
+ * Configuration to access the stores certification API
+ */
+type CertificationConfig = {
+    androidSafetyNetApiKey: string;
+};

package/types/models/permission.d.ts

@@ -52,7 +52,7 @@ export type Document = {
     _type: string;
     type: string;
 };
-export type PermissionVerb = "DELETE" | "PUT" | "POST" | "GET" | "ALL" | "PATCH";
+export type PermissionVerb = "POST" | "DELETE" | "PUT" | "GET" | "ALL" | "PATCH";
 export type PermissionItem = {
     /**
      * - ALL, GET, PUT, PATCH, DELETE, POST…