expo-secure-store 15.0.8-canary-20251120-e46b3cc → 15.0.8

package/CHANGELOG.md

@@ -10,7 +10,9 @@
 
 ### 💡 Others
 
-- [iOS] Remove byte limit warning. ([#40187](https://github.com/expo/expo/pull/40187) by [@alanjhughes](https://github.com/alanjhughes))
+## 15.0.8 — 2025-12-05
+
+_This version does not introduce any user-facing changes._
 
 ## 15.0.7 — 2025-09-11
 

package/android/build.gradle

@@ -4,16 +4,16 @@ plugins {
 }
 
 group = 'host.exp.exponent'
-version = '15.0.8-canary-20251120-e46b3cc'
+version = '15.0.8'
 
 android {
   namespace "expo.modules.securestore"
   defaultConfig {
     versionCode 17
-    versionName '15.0.8-canary-20251120-e46b3cc'
+    versionName '15.0.8'
   }
 }
 
 dependencies {
-  implementation "androidx.biometric:biometric:1.1.0"
+  api "androidx.biometric:biometric:1.1.0"
 }

package/build/SecureStore.d.ts

@@ -59,7 +59,6 @@ export type SecureStoreOptions = {
      * Warning: This option is not supported in Expo Go when biometric authentication is available due to a missing NSFaceIDUsageDescription.
      * In release builds or when using continuous native generation, make sure to use the `expo-secure-store` config plugin.
      *
-     * > **Note:** This library requires a real device for testing since emulators/simulators do not require biometric authentication when retrieving secrets, unlike real iOS devices.
      */
     requireAuthentication?: boolean;
     /**
@@ -115,7 +114,7 @@ export declare function getItemAsync(key: string, options?: SecureStoreOptions):
  * Stores a key–value pair.
  *
  * @param key The key to associate with the stored value. Keys may contain alphanumeric characters, `.`, `-`, and `_`.
- * @param value The value to store.
+ * @param value The value to store. Size limit is 2048 bytes.
  * @param options An [`SecureStoreOptions`](#securestoreoptions) object.
  *
  * @return A promise that rejects if value cannot be stored on the device.
@@ -126,7 +125,7 @@ export declare function setItemAsync(key: string, value: string, options?: Secur
  * > **Note:** This function blocks the JavaScript thread, so the application may not be interactive when the `requireAuthentication` option is set to `true` until the user authenticates.
  *
  * @param key The key to associate with the stored value. Keys may contain alphanumeric characters, `.`, `-`, and `_`.
- * @param value The value to store.
+ * @param value The value to store. Size limit is 2048 bytes.
  * @param options An [`SecureStoreOptions`](#securestoreoptions) object.
  *
  */

package/build/SecureStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SecureStore.d.ts","sourceRoot":"","sources":["../src/SecureStore.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAGnD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,6BAAkE,CAAC;AAGpG;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,6BACG,CAAC;AAGtD;;;;;GAKG;AACH,eAAO,MAAM,MAAM,EAAE,6BAAsD,CAAC;AAG5E;;;GAGG;AACH,eAAO,MAAM,kCAAkC,EAAE,6BACG,CAAC;AAGrD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,6BACG,CAAC;AAG1C;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,6BAA6D,CAAC;AAG1F;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,6BACG,CAAC;AAGjD,MAAM,MAAM,kBAAkB,GAAG;IAC/B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;;;;OAgBG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,6BAA6B,CAAC;IAEnD;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAGF;;;;;;GAMG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC,CAEzD;AAGD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAIf;AAGD;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAGxB;AAGD;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;;;;;;;GAQG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,IAAI,CAS1F;AAED;;;;;;;;;GASG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,MAAM,GAAG,IAAI,CAGpF;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,IAAI,OAAO,CAEvD"}
+{"version":3,"file":"SecureStore.d.ts","sourceRoot":"","sources":["../src/SecureStore.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAGnD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,6BAAkE,CAAC;AAGpG;;;GAGG;AACH,eAAO,MAAM,mCAAmC,EAAE,6BACG,CAAC;AAGtD;;;;;GAKG;AACH,eAAO,MAAM,MAAM,EAAE,6BAAsD,CAAC;AAG5E;;;GAGG;AACH,eAAO,MAAM,kCAAkC,EAAE,6BACG,CAAC;AAGrD;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,EAAE,6BACG,CAAC;AAG1C;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,6BAA6D,CAAC;AAG1F;;;GAGG;AACH,eAAO,MAAM,8BAA8B,EAAE,6BACG,CAAC;AAGjD,MAAM,MAAM,kBAAkB,GAAG;IAC/B;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;;;;;;;;;;;;;OAeG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,6BAA6B,CAAC;IAEnD;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAGF;;;;;;GAMG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC,CAEzD;AAGD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAIf;AAGD;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAGxB;AAGD;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CASf;AAED;;;;;;;;GAQG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,IAAI,CAS1F;AAED;;;;;;;;;GASG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,MAAM,GAAG,IAAI,CAGpF;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,IAAI,OAAO,CAEvD"}

package/build/SecureStore.js

@@ -1,4 +1,5 @@
 import ExpoSecureStore from './ExpoSecureStore';
+import { byteCountOverLimit, VALUE_BYTES_LIMIT } from './byteCounter';
 // @needsAudit
 /**
  * The data in the keychain item cannot be accessed after a restart until the device has been
@@ -91,7 +92,7 @@ export async function getItemAsync(key, options = {}) {
  * Stores a key–value pair.
  *
  * @param key The key to associate with the stored value. Keys may contain alphanumeric characters, `.`, `-`, and `_`.
- * @param value The value to store.
+ * @param value The value to store. Size limit is 2048 bytes.
  * @param options An [`SecureStoreOptions`](#securestoreoptions) object.
  *
  * @return A promise that rejects if value cannot be stored on the device.
@@ -108,7 +109,7 @@ export async function setItemAsync(key, value, options = {}) {
  * > **Note:** This function blocks the JavaScript thread, so the application may not be interactive when the `requireAuthentication` option is set to `true` until the user authenticates.
  *
  * @param key The key to associate with the stored value. Keys may contain alphanumeric characters, `.`, `-`, and `_`.
- * @param value The value to store.
+ * @param value The value to store. Size limit is 2048 bytes.
  * @param options An [`SecureStoreOptions`](#securestoreoptions) object.
  *
  */
@@ -151,6 +152,12 @@ function isValidKey(key) {
     return typeof key === 'string' && /^[\w.-]+$/.test(key);
 }
 function isValidValue(value) {
-    return typeof value === 'string';
+    if (typeof value !== 'string') {
+        return false;
+    }
+    if (byteCountOverLimit(value, VALUE_BYTES_LIMIT)) {
+        console.warn(`Value being stored in SecureStore is larger than ${VALUE_BYTES_LIMIT} bytes and it may not be stored successfully. In a future SDK version, this call may throw an error.`);
+    }
+    return true;
 }
 //# sourceMappingURL=SecureStore.js.map

package/build/SecureStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"SecureStore.js","sourceRoot":"","sources":["../src/SecureStore.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAIhD,cAAc;AACd;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAkC,eAAe,CAAC,kBAAkB,CAAC;AAEpG,cAAc;AACd;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAC9C,eAAe,CAAC,mCAAmC,CAAC;AAEtD,cAAc;AACd;;;;;GAKG;AACH,MAAM,CAAC,MAAM,MAAM,GAAkC,eAAe,CAAC,MAAM,CAAC;AAE5E,cAAc;AACd;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAC7C,eAAe,CAAC,kCAAkC,CAAC;AAErD,cAAc;AACd;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAClC,eAAe,CAAC,uBAAuB,CAAC;AAE1C,cAAc;AACd;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAkC,eAAe,CAAC,aAAa,CAAC;AAE1F,cAAc;AACd;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GACzC,eAAe,CAAC,8BAA8B,CAAC;AAgDjD,cAAc;AACd;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,OAAO,CAAC,CAAC,eAAe,CAAC,oBAAoB,CAAC;AAChD,CAAC;AAED,cAAc;AACd;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,UAA8B,EAAE;IAEhC,cAAc,CAAC,GAAG,CAAC,CAAC;IAEpB,MAAM,eAAe,CAAC,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,cAAc;AACd;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAW,EACX,UAA8B,EAAE;IAEhC,cAAc,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,MAAM,eAAe,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED,cAAc;AACd;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAW,EACX,KAAa,EACb,UAA8B,EAAE;IAEhC,cAAc,CAAC,GAAG,CAAC,CAAC;IACpB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6HAA6H,CAC9H,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,KAAa,EAAE,UAA8B,EAAE;IAClF,cAAc,CAAC,GAAG,CAAC,CAAC;IACpB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6HAA6H,CAC9H,CAAC;IACJ,CAAC;IAED,OAAO,eAAe,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,UAA8B,EAAE;IACnE,cAAc,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,eAAe,CAAC,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B;IAC3C,OAAO,eAAe,CAAC,6BAA6B,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,0HAA0H,CAC3H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AACnC,CAAC","sourcesContent":["import ExpoSecureStore from './ExpoSecureStore';\n\nexport type KeychainAccessibilityConstant = number;\n\n// @needsAudit\n/**\n * The data in the keychain item cannot be accessed after a restart until the device has been\n * unlocked once by the user. This may be useful if you need to access the item when the phone\n * is locked.\n */\nexport const AFTER_FIRST_UNLOCK: KeychainAccessibilityConstant = ExpoSecureStore.AFTER_FIRST_UNLOCK;\n\n// @needsAudit\n/**\n * Similar to `AFTER_FIRST_UNLOCK`, except the entry is not migrated to a new device when restoring\n * from a backup.\n */\nexport const AFTER_FIRST_UNLOCK_THIS_DEVICE_ONLY: KeychainAccessibilityConstant =\n  ExpoSecureStore.AFTER_FIRST_UNLOCK_THIS_DEVICE_ONLY;\n\n// @needsAudit\n/**\n * The data in the keychain item can always be accessed regardless of whether the device is locked.\n * This is the least secure option.\n *\n * @deprecated Use an accessibility level that provides some user protection, such as `AFTER_FIRST_UNLOCK`.\n */\nexport const ALWAYS: KeychainAccessibilityConstant = ExpoSecureStore.ALWAYS;\n\n// @needsAudit\n/**\n * Similar to `WHEN_UNLOCKED_THIS_DEVICE_ONLY`, except the user must have set a passcode in order to\n * store an entry. If the user removes their passcode, the entry will be deleted.\n */\nexport const WHEN_PASSCODE_SET_THIS_DEVICE_ONLY: KeychainAccessibilityConstant =\n  ExpoSecureStore.WHEN_PASSCODE_SET_THIS_DEVICE_ONLY;\n\n// @needsAudit\n/**\n * Similar to `ALWAYS`, except the entry is not migrated to a new device when restoring from a backup.\n *\n * @deprecated Use an accessibility level that provides some user protection, such as `AFTER_FIRST_UNLOCK_THIS_DEVICE_ONLY`.\n */\nexport const ALWAYS_THIS_DEVICE_ONLY: KeychainAccessibilityConstant =\n  ExpoSecureStore.ALWAYS_THIS_DEVICE_ONLY;\n\n// @needsAudit\n/**\n * The data in the keychain item can be accessed only while the device is unlocked by the user.\n */\nexport const WHEN_UNLOCKED: KeychainAccessibilityConstant = ExpoSecureStore.WHEN_UNLOCKED;\n\n// @needsAudit\n/**\n * Similar to `WHEN_UNLOCKED`, except the entry is not migrated to a new device when restoring from\n * a backup.\n */\nexport const WHEN_UNLOCKED_THIS_DEVICE_ONLY: KeychainAccessibilityConstant =\n  ExpoSecureStore.WHEN_UNLOCKED_THIS_DEVICE_ONLY;\n\n// @needsAudit\nexport type SecureStoreOptions = {\n  /**\n   * - Android: Equivalent of the public/private key pair `Alias`.\n   * - iOS: The item's service, equivalent to [`kSecAttrService`](https://developer.apple.com/documentation/security/ksecattrservice/).\n   * > If the item is set with the `keychainService` option, it will be required to later fetch the value.\n   */\n  keychainService?: string;\n  /**\n   * Option responsible for enabling the usage of the user authentication methods available on the device while\n   * accessing data stored in SecureStore.\n   * - Android: Equivalent to [`setUserAuthenticationRequired(true)`](https://developer.android.com/reference/android/security/keystore/KeyGenParameterSpec.Builder#setUserAuthenticationRequired(boolean))\n   *   (requires API 23).\n   * - iOS: Equivalent to [`biometryCurrentSet`](https://developer.apple.com/documentation/security/secaccesscontrolcreateflags/2937192-biometrycurrentset).\n   * Complete functionality is unlocked only with a freshly generated key - this would not work in tandem with the `keychainService`\n   * value used for the others non-authenticated operations.\n   *\n   * This option works slightly differently across platforms: On Android, user authentication is required for all operations.\n   * On iOS, the user is prompted to authenticate only when reading or updating an existing value (not when creating a new one).\n   *\n   * Warning: This option is not supported in Expo Go when biometric authentication is available due to a missing NSFaceIDUsageDescription.\n   * In release builds or when using continuous native generation, make sure to use the `expo-secure-store` config plugin.\n   *\n   * > **Note:** This library requires a real device for testing since emulators/simulators do not require biometric authentication when retrieving secrets, unlike real iOS devices.\n   */\n  requireAuthentication?: boolean;\n  /**\n   * Custom message displayed to the user while `requireAuthentication` option is turned on.\n   */\n  authenticationPrompt?: string;\n  /**\n   * Specifies when the stored entry is accessible, using iOS's `kSecAttrAccessible` property.\n   * @see Apple's documentation on [keychain item accessibility](https://developer.apple.com/documentation/security/ksecattraccessible/).\n   * @default SecureStore.WHEN_UNLOCKED\n   * @platform ios\n   */\n  keychainAccessible?: KeychainAccessibilityConstant;\n\n  /**\n   * Specifies the access group the stored entry belongs to.\n   * @see Apple's documentation on [Sharing access to keychain items among a collection of apps](https://developer.apple.com/documentation/security/sharing-access-to-keychain-items-among-a-collection-of-apps).\n   * @platform ios\n   */\n  accessGroup?: string;\n};\n\n// @needsAudit\n/**\n * Returns whether the SecureStore API is enabled on the current device. This does not check the app\n * permissions.\n *\n * @return Promise which fulfils with a `boolean`, indicating whether the SecureStore API is available\n * on the current device. Currently, this resolves `true` on Android and iOS only.\n */\nexport async function isAvailableAsync(): Promise<boolean> {\n  return !!ExpoSecureStore.getValueWithKeyAsync;\n}\n\n// @needsAudit\n/**\n * Delete the value associated with the provided key.\n *\n * @param key The key that was used to store the associated value.\n * @param options An [`SecureStoreOptions`](#securestoreoptions) object.\n *\n * @return A promise that rejects if the value can't be deleted.\n */\nexport async function deleteItemAsync(\n  key: string,\n  options: SecureStoreOptions = {}\n): Promise<void> {\n  ensureValidKey(key);\n\n  await ExpoSecureStore.deleteValueWithKeyAsync(key, options);\n}\n\n// @needsAudit\n/**\n * Reads the stored value associated with the provided key.\n *\n * @param key The key that was used to store the associated value.\n * @param options An [`SecureStoreOptions`](#securestoreoptions) object.\n *\n * @return A promise that resolves to the previously stored value. It resolves with `null` if there is no entry\n * for the given key or if the key has been invalidated. It rejects if an error occurs while retrieving the value.\n *\n * > Keys are invalidated by the system when biometrics change, such as adding a new fingerprint or changing the face profile used for face recognition.\n * > After a key has been invalidated, it becomes impossible to read its value.\n * > This only applies to values stored with `requireAuthentication` set to `true`.\n */\nexport async function getItemAsync(\n  key: string,\n  options: SecureStoreOptions = {}\n): Promise<string | null> {\n  ensureValidKey(key);\n  return await ExpoSecureStore.getValueWithKeyAsync(key, options);\n}\n\n// @needsAudit\n/**\n * Stores a key–value pair.\n *\n * @param key The key to associate with the stored value. Keys may contain alphanumeric characters, `.`, `-`, and `_`.\n * @param value The value to store.\n * @param options An [`SecureStoreOptions`](#securestoreoptions) object.\n *\n * @return A promise that rejects if value cannot be stored on the device.\n */\nexport async function setItemAsync(\n  key: string,\n  value: string,\n  options: SecureStoreOptions = {}\n): Promise<void> {\n  ensureValidKey(key);\n  if (!isValidValue(value)) {\n    throw new Error(\n      `Invalid value provided to SecureStore. Values must be strings; consider JSON-encoding your values if they are serializable.`\n    );\n  }\n\n  await ExpoSecureStore.setValueWithKeyAsync(value, key, options);\n}\n\n/**\n * Stores a key–value pair synchronously.\n * > **Note:** This function blocks the JavaScript thread, so the application may not be interactive when the `requireAuthentication` option is set to `true` until the user authenticates.\n *\n * @param key The key to associate with the stored value. Keys may contain alphanumeric characters, `.`, `-`, and `_`.\n * @param value The value to store.\n * @param options An [`SecureStoreOptions`](#securestoreoptions) object.\n *\n */\nexport function setItem(key: string, value: string, options: SecureStoreOptions = {}): void {\n  ensureValidKey(key);\n  if (!isValidValue(value)) {\n    throw new Error(\n      `Invalid value provided to SecureStore. Values must be strings; consider JSON-encoding your values if they are serializable.`\n    );\n  }\n\n  return ExpoSecureStore.setValueWithKeySync(value, key, options);\n}\n\n/**\n * Synchronously reads the stored value associated with the provided key.\n * > **Note:** This function blocks the JavaScript thread, so the application may not be interactive when reading a value with `requireAuthentication`\n * > option set to `true` until the user authenticates.\n * @param key The key that was used to store the associated value.\n * @param options An [`SecureStoreOptions`](#securestoreoptions) object.\n *\n * @return Previously stored value. It resolves with `null` if there is no entry\n * for the given key or if the key has been invalidated.\n */\nexport function getItem(key: string, options: SecureStoreOptions = {}): string | null {\n  ensureValidKey(key);\n  return ExpoSecureStore.getValueWithKeySync(key, options);\n}\n\n/**\n * Checks if the value can be saved with `requireAuthentication` option enabled.\n * @return `true` if the device supports biometric authentication and the enrolled method is sufficiently secure. Otherwise, returns `false`. Always returns false on tvOS.\n * @platform android\n * @platform ios\n */\nexport function canUseBiometricAuthentication(): boolean {\n  return ExpoSecureStore.canUseBiometricAuthentication();\n}\n\nfunction ensureValidKey(key: string) {\n  if (!isValidKey(key)) {\n    throw new Error(\n      `Invalid key provided to SecureStore. Keys must not be empty and contain only alphanumeric characters, \".\", \"-\", and \"_\".`\n    );\n  }\n}\n\nfunction isValidKey(key: string) {\n  return typeof key === 'string' && /^[\\w.-]+$/.test(key);\n}\n\nfunction isValidValue(value: string) {\n  return typeof value === 'string';\n}\n"]}
+{"version":3,"file":"SecureStore.js","sourceRoot":"","sources":["../src/SecureStore.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAItE,cAAc;AACd;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAkC,eAAe,CAAC,kBAAkB,CAAC;AAEpG,cAAc;AACd;;;GAGG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAC9C,eAAe,CAAC,mCAAmC,CAAC;AAEtD,cAAc;AACd;;;;;GAKG;AACH,MAAM,CAAC,MAAM,MAAM,GAAkC,eAAe,CAAC,MAAM,CAAC;AAE5E,cAAc;AACd;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAC7C,eAAe,CAAC,kCAAkC,CAAC;AAErD,cAAc;AACd;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAClC,eAAe,CAAC,uBAAuB,CAAC;AAE1C,cAAc;AACd;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAkC,eAAe,CAAC,aAAa,CAAC;AAE1F,cAAc;AACd;;;GAGG;AACH,MAAM,CAAC,MAAM,8BAA8B,GACzC,eAAe,CAAC,8BAA8B,CAAC;AA+CjD,cAAc;AACd;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,OAAO,CAAC,CAAC,eAAe,CAAC,oBAAoB,CAAC;AAChD,CAAC;AAED,cAAc;AACd;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,UAA8B,EAAE;IAEhC,cAAc,CAAC,GAAG,CAAC,CAAC;IAEpB,MAAM,eAAe,CAAC,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC;AAED,cAAc;AACd;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAW,EACX,UAA8B,EAAE;IAEhC,cAAc,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,MAAM,eAAe,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED,cAAc;AACd;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAW,EACX,KAAa,EACb,UAA8B,EAAE;IAEhC,cAAc,CAAC,GAAG,CAAC,CAAC;IACpB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6HAA6H,CAC9H,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,CAAC,oBAAoB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,KAAa,EAAE,UAA8B,EAAE;IAClF,cAAc,CAAC,GAAG,CAAC,CAAC;IACpB,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,6HAA6H,CAC9H,CAAC;IACJ,CAAC;IAED,OAAO,eAAe,CAAC,mBAAmB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,UAA8B,EAAE;IACnE,cAAc,CAAC,GAAG,CAAC,CAAC;IACpB,OAAO,eAAe,CAAC,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B;IAC3C,OAAO,eAAe,CAAC,6BAA6B,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CACb,0HAA0H,CAC3H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACjD,OAAO,CAAC,IAAI,CACV,oDAAoD,iBAAiB,sGAAsG,CAC5K,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["import ExpoSecureStore from './ExpoSecureStore';\nimport { byteCountOverLimit, VALUE_BYTES_LIMIT } from './byteCounter';\n\nexport type KeychainAccessibilityConstant = number;\n\n// @needsAudit\n/**\n * The data in the keychain item cannot be accessed after a restart until the device has been\n * unlocked once by the user. This may be useful if you need to access the item when the phone\n * is locked.\n */\nexport const AFTER_FIRST_UNLOCK: KeychainAccessibilityConstant = ExpoSecureStore.AFTER_FIRST_UNLOCK;\n\n// @needsAudit\n/**\n * Similar to `AFTER_FIRST_UNLOCK`, except the entry is not migrated to a new device when restoring\n * from a backup.\n */\nexport const AFTER_FIRST_UNLOCK_THIS_DEVICE_ONLY: KeychainAccessibilityConstant =\n  ExpoSecureStore.AFTER_FIRST_UNLOCK_THIS_DEVICE_ONLY;\n\n// @needsAudit\n/**\n * The data in the keychain item can always be accessed regardless of whether the device is locked.\n * This is the least secure option.\n *\n * @deprecated Use an accessibility level that provides some user protection, such as `AFTER_FIRST_UNLOCK`.\n */\nexport const ALWAYS: KeychainAccessibilityConstant = ExpoSecureStore.ALWAYS;\n\n// @needsAudit\n/**\n * Similar to `WHEN_UNLOCKED_THIS_DEVICE_ONLY`, except the user must have set a passcode in order to\n * store an entry. If the user removes their passcode, the entry will be deleted.\n */\nexport const WHEN_PASSCODE_SET_THIS_DEVICE_ONLY: KeychainAccessibilityConstant =\n  ExpoSecureStore.WHEN_PASSCODE_SET_THIS_DEVICE_ONLY;\n\n// @needsAudit\n/**\n * Similar to `ALWAYS`, except the entry is not migrated to a new device when restoring from a backup.\n *\n * @deprecated Use an accessibility level that provides some user protection, such as `AFTER_FIRST_UNLOCK_THIS_DEVICE_ONLY`.\n */\nexport const ALWAYS_THIS_DEVICE_ONLY: KeychainAccessibilityConstant =\n  ExpoSecureStore.ALWAYS_THIS_DEVICE_ONLY;\n\n// @needsAudit\n/**\n * The data in the keychain item can be accessed only while the device is unlocked by the user.\n */\nexport const WHEN_UNLOCKED: KeychainAccessibilityConstant = ExpoSecureStore.WHEN_UNLOCKED;\n\n// @needsAudit\n/**\n * Similar to `WHEN_UNLOCKED`, except the entry is not migrated to a new device when restoring from\n * a backup.\n */\nexport const WHEN_UNLOCKED_THIS_DEVICE_ONLY: KeychainAccessibilityConstant =\n  ExpoSecureStore.WHEN_UNLOCKED_THIS_DEVICE_ONLY;\n\n// @needsAudit\nexport type SecureStoreOptions = {\n  /**\n   * - Android: Equivalent of the public/private key pair `Alias`.\n   * - iOS: The item's service, equivalent to [`kSecAttrService`](https://developer.apple.com/documentation/security/ksecattrservice/).\n   * > If the item is set with the `keychainService` option, it will be required to later fetch the value.\n   */\n  keychainService?: string;\n  /**\n   * Option responsible for enabling the usage of the user authentication methods available on the device while\n   * accessing data stored in SecureStore.\n   * - Android: Equivalent to [`setUserAuthenticationRequired(true)`](https://developer.android.com/reference/android/security/keystore/KeyGenParameterSpec.Builder#setUserAuthenticationRequired(boolean))\n   *   (requires API 23).\n   * - iOS: Equivalent to [`biometryCurrentSet`](https://developer.apple.com/documentation/security/secaccesscontrolcreateflags/2937192-biometrycurrentset).\n   * Complete functionality is unlocked only with a freshly generated key - this would not work in tandem with the `keychainService`\n   * value used for the others non-authenticated operations.\n   *\n   * This option works slightly differently across platforms: On Android, user authentication is required for all operations.\n   * On iOS, the user is prompted to authenticate only when reading or updating an existing value (not when creating a new one).\n   *\n   * Warning: This option is not supported in Expo Go when biometric authentication is available due to a missing NSFaceIDUsageDescription.\n   * In release builds or when using continuous native generation, make sure to use the `expo-secure-store` config plugin.\n   *\n   */\n  requireAuthentication?: boolean;\n  /**\n   * Custom message displayed to the user while `requireAuthentication` option is turned on.\n   */\n  authenticationPrompt?: string;\n  /**\n   * Specifies when the stored entry is accessible, using iOS's `kSecAttrAccessible` property.\n   * @see Apple's documentation on [keychain item accessibility](https://developer.apple.com/documentation/security/ksecattraccessible/).\n   * @default SecureStore.WHEN_UNLOCKED\n   * @platform ios\n   */\n  keychainAccessible?: KeychainAccessibilityConstant;\n\n  /**\n   * Specifies the access group the stored entry belongs to.\n   * @see Apple's documentation on [Sharing access to keychain items among a collection of apps](https://developer.apple.com/documentation/security/sharing-access-to-keychain-items-among-a-collection-of-apps).\n   * @platform ios\n   */\n  accessGroup?: string;\n};\n\n// @needsAudit\n/**\n * Returns whether the SecureStore API is enabled on the current device. This does not check the app\n * permissions.\n *\n * @return Promise which fulfils with a `boolean`, indicating whether the SecureStore API is available\n * on the current device. Currently, this resolves `true` on Android and iOS only.\n */\nexport async function isAvailableAsync(): Promise<boolean> {\n  return !!ExpoSecureStore.getValueWithKeyAsync;\n}\n\n// @needsAudit\n/**\n * Delete the value associated with the provided key.\n *\n * @param key The key that was used to store the associated value.\n * @param options An [`SecureStoreOptions`](#securestoreoptions) object.\n *\n * @return A promise that rejects if the value can't be deleted.\n */\nexport async function deleteItemAsync(\n  key: string,\n  options: SecureStoreOptions = {}\n): Promise<void> {\n  ensureValidKey(key);\n\n  await ExpoSecureStore.deleteValueWithKeyAsync(key, options);\n}\n\n// @needsAudit\n/**\n * Reads the stored value associated with the provided key.\n *\n * @param key The key that was used to store the associated value.\n * @param options An [`SecureStoreOptions`](#securestoreoptions) object.\n *\n * @return A promise that resolves to the previously stored value. It resolves with `null` if there is no entry\n * for the given key or if the key has been invalidated. It rejects if an error occurs while retrieving the value.\n *\n * > Keys are invalidated by the system when biometrics change, such as adding a new fingerprint or changing the face profile used for face recognition.\n * > After a key has been invalidated, it becomes impossible to read its value.\n * > This only applies to values stored with `requireAuthentication` set to `true`.\n */\nexport async function getItemAsync(\n  key: string,\n  options: SecureStoreOptions = {}\n): Promise<string | null> {\n  ensureValidKey(key);\n  return await ExpoSecureStore.getValueWithKeyAsync(key, options);\n}\n\n// @needsAudit\n/**\n * Stores a key–value pair.\n *\n * @param key The key to associate with the stored value. Keys may contain alphanumeric characters, `.`, `-`, and `_`.\n * @param value The value to store. Size limit is 2048 bytes.\n * @param options An [`SecureStoreOptions`](#securestoreoptions) object.\n *\n * @return A promise that rejects if value cannot be stored on the device.\n */\nexport async function setItemAsync(\n  key: string,\n  value: string,\n  options: SecureStoreOptions = {}\n): Promise<void> {\n  ensureValidKey(key);\n  if (!isValidValue(value)) {\n    throw new Error(\n      `Invalid value provided to SecureStore. Values must be strings; consider JSON-encoding your values if they are serializable.`\n    );\n  }\n\n  await ExpoSecureStore.setValueWithKeyAsync(value, key, options);\n}\n\n/**\n * Stores a key–value pair synchronously.\n * > **Note:** This function blocks the JavaScript thread, so the application may not be interactive when the `requireAuthentication` option is set to `true` until the user authenticates.\n *\n * @param key The key to associate with the stored value. Keys may contain alphanumeric characters, `.`, `-`, and `_`.\n * @param value The value to store. Size limit is 2048 bytes.\n * @param options An [`SecureStoreOptions`](#securestoreoptions) object.\n *\n */\nexport function setItem(key: string, value: string, options: SecureStoreOptions = {}): void {\n  ensureValidKey(key);\n  if (!isValidValue(value)) {\n    throw new Error(\n      `Invalid value provided to SecureStore. Values must be strings; consider JSON-encoding your values if they are serializable.`\n    );\n  }\n\n  return ExpoSecureStore.setValueWithKeySync(value, key, options);\n}\n\n/**\n * Synchronously reads the stored value associated with the provided key.\n * > **Note:** This function blocks the JavaScript thread, so the application may not be interactive when reading a value with `requireAuthentication`\n * > option set to `true` until the user authenticates.\n * @param key The key that was used to store the associated value.\n * @param options An [`SecureStoreOptions`](#securestoreoptions) object.\n *\n * @return Previously stored value. It resolves with `null` if there is no entry\n * for the given key or if the key has been invalidated.\n */\nexport function getItem(key: string, options: SecureStoreOptions = {}): string | null {\n  ensureValidKey(key);\n  return ExpoSecureStore.getValueWithKeySync(key, options);\n}\n\n/**\n * Checks if the value can be saved with `requireAuthentication` option enabled.\n * @return `true` if the device supports biometric authentication and the enrolled method is sufficiently secure. Otherwise, returns `false`. Always returns false on tvOS.\n * @platform android\n * @platform ios\n */\nexport function canUseBiometricAuthentication(): boolean {\n  return ExpoSecureStore.canUseBiometricAuthentication();\n}\n\nfunction ensureValidKey(key: string) {\n  if (!isValidKey(key)) {\n    throw new Error(\n      `Invalid key provided to SecureStore. Keys must not be empty and contain only alphanumeric characters, \".\", \"-\", and \"_\".`\n    );\n  }\n}\n\nfunction isValidKey(key: string) {\n  return typeof key === 'string' && /^[\\w.-]+$/.test(key);\n}\n\nfunction isValidValue(value: string) {\n  if (typeof value !== 'string') {\n    return false;\n  }\n  if (byteCountOverLimit(value, VALUE_BYTES_LIMIT)) {\n    console.warn(\n      `Value being stored in SecureStore is larger than ${VALUE_BYTES_LIMIT} bytes and it may not be stored successfully. In a future SDK version, this call may throw an error.`\n    );\n  }\n  return true;\n}\n"]}

package/build/byteCounter.d.ts

@@ -0,0 +1,3 @@
+export declare const VALUE_BYTES_LIMIT = 2048;
+export declare function byteCountOverLimit(value: string, limit: number): boolean;
+//# sourceMappingURL=byteCounter.d.ts.map

package/build/byteCounter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"byteCounter.d.ts","sourceRoot":"","sources":["../src/byteCounter.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAItC,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CA6BxE"}

package/build/byteCounter.js

@@ -0,0 +1,29 @@
+export const VALUE_BYTES_LIMIT = 2048;
+// note this probably could be JS-engine dependent
+// inspired by https://stackoverflow.com/a/39488643
+export function byteCountOverLimit(value, limit) {
+    let bytes = 0;
+    for (let i = 0; i < value.length; i++) {
+        const codePoint = value.charCodeAt(i);
+        // Lone surrogates cannot be passed to encodeURI
+        if (codePoint >= 0xd800 && codePoint < 0xe000) {
+            if (codePoint < 0xdc00 && i + 1 < value.length) {
+                const next = value.charCodeAt(i + 1);
+                if (next >= 0xdc00 && next < 0xe000) {
+                    bytes += 4;
+                    if (bytes > limit) {
+                        return true;
+                    }
+                    i++;
+                    continue;
+                }
+            }
+        }
+        bytes += codePoint < 0x80 ? 1 : codePoint < 0x800 ? 2 : 3;
+        if (bytes > limit) {
+            return true;
+        }
+    }
+    return bytes > limit;
+}
+//# sourceMappingURL=byteCounter.js.map

package/build/byteCounter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"byteCounter.js","sourceRoot":"","sources":["../src/byteCounter.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC,kDAAkD;AAClD,mDAAmD;AACnD,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,KAAa;IAC7D,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAEtC,gDAAgD;QAChD,IAAI,SAAS,IAAI,MAAM,IAAI,SAAS,GAAG,MAAM,EAAE,CAAC;YAC9C,IAAI,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBAErC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;oBACpC,KAAK,IAAI,CAAC,CAAC;oBACX,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;wBAClB,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,CAAC,EAAE,CAAC;oBACJ,SAAS;gBACX,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,IAAI,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,KAAK,GAAG,KAAK,CAAC;AACvB,CAAC","sourcesContent":["export const VALUE_BYTES_LIMIT = 2048;\n\n// note this probably could be JS-engine dependent\n// inspired by https://stackoverflow.com/a/39488643\nexport function byteCountOverLimit(value: string, limit: number): boolean {\n  let bytes = 0;\n\n  for (let i = 0; i < value.length; i++) {\n    const codePoint = value.charCodeAt(i);\n\n    // Lone surrogates cannot be passed to encodeURI\n    if (codePoint >= 0xd800 && codePoint < 0xe000) {\n      if (codePoint < 0xdc00 && i + 1 < value.length) {\n        const next = value.charCodeAt(i + 1);\n\n        if (next >= 0xdc00 && next < 0xe000) {\n          bytes += 4;\n          if (bytes > limit) {\n            return true;\n          }\n          i++;\n          continue;\n        }\n      }\n    }\n\n    bytes += codePoint < 0x80 ? 1 : codePoint < 0x800 ? 2 : 3;\n    if (bytes > limit) {\n      return true;\n    }\n  }\n\n  return bytes > limit;\n}\n"]}

package/expo-module.config.json

@@ -8,7 +8,7 @@
     "publication": {
       "groupId": "host.exp.exponent",
       "artifactId": "expo.modules.securestore",
-      "version": "15.0.8-canary-20251120-e46b3cc",
+      "version": "15.0.8",
       "repository": "local-maven-repo"
     }
   }

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8/expo.modules.securestore-15.0.8.aar.md5

@@ -0,0 +1 @@
+5878bd39148e0d832aae804e7a9fde46

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8/expo.modules.securestore-15.0.8.aar.sha1

@@ -0,0 +1 @@
+e718b4158b2c9bade4ee03c5402e14f8111ff74e

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8/expo.modules.securestore-15.0.8.aar.sha256

@@ -0,0 +1 @@
+c2c1b256a2124c314b2036cf0525c7ebb79a452ba4b8f29fa5189acf30844a45

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8/expo.modules.securestore-15.0.8.aar.sha512

@@ -0,0 +1 @@
+2dffed2dc601b8199014aba21fbde87ef37099d57ebd3d05d4e6374f301e3e252837e999895d8fcac837a8364fafa4c467dcc92ba2bec91a07ff08ab031a521f

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/{15.0.8-canary-20251120-e46b3cc/expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.module → 15.0.8/expo.modules.securestore-15.0.8.module}

@@ -3,14 +3,14 @@
   "component": {
     "group": "host.exp.exponent",
     "module": "expo.modules.securestore",
-    "version": "15.0.8-canary-20251120-e46b3cc",
+    "version": "15.0.8",
     "attributes": {
       "org.gradle.status": "release"
     }
   },
   "createdBy": {
     "gradle": {
-      "version": "9.0.0"
+      "version": "8.14.3"
     }
   },
   "variants": [
@@ -22,15 +22,24 @@
         "org.gradle.libraryelements": "aar",
         "org.gradle.usage": "java-api"
       },
+      "dependencies": [
+        {
+          "group": "androidx.biometric",
+          "module": "biometric",
+          "version": {
+            "requires": "1.1.0"
+          }
+        }
+      ],
       "files": [
         {
-          "name": "expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.aar",
-          "url": "expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.aar",
-          "size": 76113,
-          "sha512": "5a0407c4499ff5bcdf964be82c67181ad55b2a5e2ce06ebbb1f1ac062ef23fcde3349089c5340d91e092f15f05a7cb36e3c073e3f239384978533df0ff0e48b7",
-          "sha256": "611eaa630af23a65b0f358a2c15ab1757506468093493f246bc3f16bba7f833c",
-          "sha1": "52167297cf17ade75a0a680ec1b2d4dcd3af08c7",
-          "md5": "9815e148666981babbb08036a67eede7"
+          "name": "expo.modules.securestore-15.0.8.aar",
+          "url": "expo.modules.securestore-15.0.8.aar",
+          "size": 76115,
+          "sha512": "2dffed2dc601b8199014aba21fbde87ef37099d57ebd3d05d4e6374f301e3e252837e999895d8fcac837a8364fafa4c467dcc92ba2bec91a07ff08ab031a521f",
+          "sha256": "c2c1b256a2124c314b2036cf0525c7ebb79a452ba4b8f29fa5189acf30844a45",
+          "sha1": "e718b4158b2c9bade4ee03c5402e14f8111ff74e",
+          "md5": "5878bd39148e0d832aae804e7a9fde46"
         }
       ]
     },
@@ -60,13 +69,13 @@
       ],
       "files": [
         {
-          "name": "expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.aar",
-          "url": "expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.aar",
-          "size": 76113,
-          "sha512": "5a0407c4499ff5bcdf964be82c67181ad55b2a5e2ce06ebbb1f1ac062ef23fcde3349089c5340d91e092f15f05a7cb36e3c073e3f239384978533df0ff0e48b7",
-          "sha256": "611eaa630af23a65b0f358a2c15ab1757506468093493f246bc3f16bba7f833c",
-          "sha1": "52167297cf17ade75a0a680ec1b2d4dcd3af08c7",
-          "md5": "9815e148666981babbb08036a67eede7"
+          "name": "expo.modules.securestore-15.0.8.aar",
+          "url": "expo.modules.securestore-15.0.8.aar",
+          "size": 76115,
+          "sha512": "2dffed2dc601b8199014aba21fbde87ef37099d57ebd3d05d4e6374f301e3e252837e999895d8fcac837a8364fafa4c467dcc92ba2bec91a07ff08ab031a521f",
+          "sha256": "c2c1b256a2124c314b2036cf0525c7ebb79a452ba4b8f29fa5189acf30844a45",
+          "sha1": "e718b4158b2c9bade4ee03c5402e14f8111ff74e",
+          "md5": "5878bd39148e0d832aae804e7a9fde46"
         }
       ]
     },
@@ -80,8 +89,8 @@
       },
       "files": [
         {
-          "name": "expo.modules.securestore-15.0.8-canary-20251120-e46b3cc-sources.jar",
-          "url": "expo.modules.securestore-15.0.8-canary-20251120-e46b3cc-sources.jar",
+          "name": "expo.modules.securestore-15.0.8-sources.jar",
+          "url": "expo.modules.securestore-15.0.8-sources.jar",
           "size": 13495,
           "sha512": "12ce03192b17ad81fdf2e14ea2a78bb7e932ed68c9619c6ac21f5a07077a3a4d10b558fe74d8ea889f1a736e8493c670cc3c8f86923af310bf2b93a1448b9664",
           "sha256": "35e759455fb0fd6f3145840ca440d99cc3fd1a0d7ef9d418019a35000b837701",

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8/expo.modules.securestore-15.0.8.module.md5

@@ -0,0 +1 @@
+8e5deb1b728e3dbe978b06091b4d6fd1

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8/expo.modules.securestore-15.0.8.module.sha1

@@ -0,0 +1 @@
+403fef27894d1157249011fecf69c7e1acf1c9d6

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8/expo.modules.securestore-15.0.8.module.sha256

@@ -0,0 +1 @@
+bd01ff0dcbe827edcb72017562680e310d22b38c7ebf9efd9ca56426e64f229c

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8/expo.modules.securestore-15.0.8.module.sha512

@@ -0,0 +1 @@
+ff50ea19ebd0e345f44c7e57543e887784c70eddd7061b910f0747f9e45d85b87019d69b3bf2499ecfa246b1c502a8ea86bf661f8068a536ddf923a8cbbd7f7d

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/{15.0.8-canary-20251120-e46b3cc/expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.pom → 15.0.8/expo.modules.securestore-15.0.8.pom}

@@ -9,7 +9,7 @@
   <modelVersion>4.0.0</modelVersion>
   <groupId>host.exp.exponent</groupId>
   <artifactId>expo.modules.securestore</artifactId>
-  <version>15.0.8-canary-20251120-e46b3cc</version>
+  <version>15.0.8</version>
   <packaging>aar</packaging>
   <name>expo.modules.securestore</name>
   <url>https://github.com/expo/expo</url>
@@ -25,16 +25,16 @@
     <url>https://github.com/expo/expo</url>
   </scm>
   <dependencies>
-    <dependency>
-      <groupId>org.jetbrains.kotlin</groupId>
-      <artifactId>kotlin-stdlib-jdk7</artifactId>
-      <version>2.1.20</version>
-      <scope>runtime</scope>
-    </dependency>
     <dependency>
       <groupId>androidx.biometric</groupId>
       <artifactId>biometric</artifactId>
       <version>1.1.0</version>
+      <scope>compile</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.jetbrains.kotlin</groupId>
+      <artifactId>kotlin-stdlib-jdk7</artifactId>
+      <version>2.1.20</version>
       <scope>runtime</scope>
     </dependency>
   </dependencies>

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8/expo.modules.securestore-15.0.8.pom.md5

@@ -0,0 +1 @@
+b204916d354ba1298aeecaaaba7cc380

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8/expo.modules.securestore-15.0.8.pom.sha1

@@ -0,0 +1 @@
+99cef6029f0e4fa3c762930584e04ad3b39e938c

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8/expo.modules.securestore-15.0.8.pom.sha256

@@ -0,0 +1 @@
+ae2fbc8ad8a3d9c83688e4d4383e72b12abf4b116a609e3a18140f4df83d371b

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8/expo.modules.securestore-15.0.8.pom.sha512

@@ -0,0 +1 @@
+090e6ba798a45ed9c5e69a8c6d5ab0d465684836718320fb078f7e2429d3d582eae12a9783f4a8b6e8609698c7785acebe5ee7edd75f892a037a071a1819e5f4

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/maven-metadata.xml

@@ -3,11 +3,11 @@
   <groupId>host.exp.exponent</groupId>
   <artifactId>expo.modules.securestore</artifactId>
   <versioning>
-    <latest>15.0.8-canary-20251120-e46b3cc</latest>
-    <release>15.0.8-canary-20251120-e46b3cc</release>
+    <latest>15.0.8</latest>
+    <release>15.0.8</release>
     <versions>
-      <version>15.0.8-canary-20251120-e46b3cc</version>
+      <version>15.0.8</version>
     </versions>
-    <lastUpdated>20251120092106</lastUpdated>
+    <lastUpdated>20251205064545</lastUpdated>
   </versioning>
 </metadata>

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/maven-metadata.xml.md5

@@ -1 +1 @@
-8f6fe0fc22ef24d19a9483dae50d189a
+f4be937465441e2a5e75adfeac4ed674

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/maven-metadata.xml.sha1

@@ -1 +1 @@
-81ab85d138f3b6939dcb3402c50542b84712a957
+54e7d8b9804cdc7621fdd4d48d4fe355783fd32e

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/maven-metadata.xml.sha256

@@ -1 +1 @@
-9fc0d23d04c0d30b035a9d16c8763b57ead1963bcc1f2c838996c87332dc6325
+c6f2432f18cbda15ef35c9eb26708111f633aa6bfd3f8a5e013c1d1fdbd209ec

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/maven-metadata.xml.sha512

@@ -1 +1 @@
-8cf7aa117d9aa2cb6c5056f9b11b073c039101c3ae3bce8a6e889aa0882977070653998fdf8233c68b388e2f4b6259c9349a335005e4e0c9abdbe1dee16ab771
+dd003df05afd20f3faa773b56b068a3baa2f3be2250941817eda520bb7326dd6f370029447fbbac22cffb7703fc8545cbc25349945d68cb04aff56da540e80e5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "expo-secure-store",
-  "version": "15.0.8-canary-20251120-e46b3cc",
+  "version": "15.0.8",
   "description": "Provides a way to encrypt and securely store key-value pairs locally on the device.",
   "main": "build/SecureStore.js",
   "types": "build/SecureStore.d.ts",
@@ -37,9 +37,10 @@
   },
   "dependencies": {},
   "devDependencies": {
-    "expo-module-scripts": "5.1.0-canary-20251120-e46b3cc"
+    "expo-module-scripts": "^5.0.8"
   },
   "peerDependencies": {
-    "expo": "55.0.0-canary-20251120-e46b3cc"
-  }
+    "expo": "*"
+  },
+  "gitHead": "172a69f5f70c1d0e043e1532f924de97210cabc3"
 }

package/src/SecureStore.ts

@@ -1,4 +1,5 @@
 import ExpoSecureStore from './ExpoSecureStore';
+import { byteCountOverLimit, VALUE_BYTES_LIMIT } from './byteCounter';
 
 export type KeychainAccessibilityConstant = number;
 
@@ -81,7 +82,6 @@ export type SecureStoreOptions = {
    * Warning: This option is not supported in Expo Go when biometric authentication is available due to a missing NSFaceIDUsageDescription.
    * In release builds or when using continuous native generation, make sure to use the `expo-secure-store` config plugin.
    *
-   * > **Note:** This library requires a real device for testing since emulators/simulators do not require biometric authentication when retrieving secrets, unlike real iOS devices.
    */
   requireAuthentication?: boolean;
   /**
@@ -161,7 +161,7 @@ export async function getItemAsync(
  * Stores a key–value pair.
  *
  * @param key The key to associate with the stored value. Keys may contain alphanumeric characters, `.`, `-`, and `_`.
- * @param value The value to store.
+ * @param value The value to store. Size limit is 2048 bytes.
  * @param options An [`SecureStoreOptions`](#securestoreoptions) object.
  *
  * @return A promise that rejects if value cannot be stored on the device.
@@ -186,7 +186,7 @@ export async function setItemAsync(
  * > **Note:** This function blocks the JavaScript thread, so the application may not be interactive when the `requireAuthentication` option is set to `true` until the user authenticates.
  *
  * @param key The key to associate with the stored value. Keys may contain alphanumeric characters, `.`, `-`, and `_`.
- * @param value The value to store.
+ * @param value The value to store. Size limit is 2048 bytes.
  * @param options An [`SecureStoreOptions`](#securestoreoptions) object.
  *
  */
@@ -239,5 +239,13 @@ function isValidKey(key: string) {
 }
 
 function isValidValue(value: string) {
-  return typeof value === 'string';
+  if (typeof value !== 'string') {
+    return false;
+  }
+  if (byteCountOverLimit(value, VALUE_BYTES_LIMIT)) {
+    console.warn(
+      `Value being stored in SecureStore is larger than ${VALUE_BYTES_LIMIT} bytes and it may not be stored successfully. In a future SDK version, this call may throw an error.`
+    );
+  }
+  return true;
 }

package/src/byteCounter.ts

@@ -0,0 +1,34 @@
+export const VALUE_BYTES_LIMIT = 2048;
+
+// note this probably could be JS-engine dependent
+// inspired by https://stackoverflow.com/a/39488643
+export function byteCountOverLimit(value: string, limit: number): boolean {
+  let bytes = 0;
+
+  for (let i = 0; i < value.length; i++) {
+    const codePoint = value.charCodeAt(i);
+
+    // Lone surrogates cannot be passed to encodeURI
+    if (codePoint >= 0xd800 && codePoint < 0xe000) {
+      if (codePoint < 0xdc00 && i + 1 < value.length) {
+        const next = value.charCodeAt(i + 1);
+
+        if (next >= 0xdc00 && next < 0xe000) {
+          bytes += 4;
+          if (bytes > limit) {
+            return true;
+          }
+          i++;
+          continue;
+        }
+      }
+    }
+
+    bytes += codePoint < 0x80 ? 1 : codePoint < 0x800 ? 2 : 3;
+    if (bytes > limit) {
+      return true;
+    }
+  }
+
+  return bytes > limit;
+}

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8-canary-20251120-e46b3cc/expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.aar.md5

@@ -1 +0,0 @@
-9815e148666981babbb08036a67eede7

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8-canary-20251120-e46b3cc/expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.aar.sha1

@@ -1 +0,0 @@
-52167297cf17ade75a0a680ec1b2d4dcd3af08c7

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8-canary-20251120-e46b3cc/expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.aar.sha256

@@ -1 +0,0 @@
-611eaa630af23a65b0f358a2c15ab1757506468093493f246bc3f16bba7f833c

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8-canary-20251120-e46b3cc/expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.aar.sha512

@@ -1 +0,0 @@
-5a0407c4499ff5bcdf964be82c67181ad55b2a5e2ce06ebbb1f1ac062ef23fcde3349089c5340d91e092f15f05a7cb36e3c073e3f239384978533df0ff0e48b7

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8-canary-20251120-e46b3cc/expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.module.md5

@@ -1 +0,0 @@
-4a1a3d3c2b064df2d1fd369036d9ac51

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8-canary-20251120-e46b3cc/expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.module.sha1

@@ -1 +0,0 @@
-8aa774d061d45850f9f01904fceec7d83e76dd1e

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8-canary-20251120-e46b3cc/expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.module.sha256

@@ -1 +0,0 @@
-fb0ae0899ddfe480e17b38a6791b89f06410b4bde22a04613253f7d46917240a

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8-canary-20251120-e46b3cc/expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.module.sha512

@@ -1 +0,0 @@
-c26c8ad9b1d4baac216da551baa8390d5046a23ccc8238e5f2c0acaf510e2124dd2966258701604c2dbeecc43fe91b6fabd8655e8bb487abd3e029cd2d3e60b2

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8-canary-20251120-e46b3cc/expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.pom.md5

@@ -1 +0,0 @@
-25f60d64ba875748d2b0ea66a8921101

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8-canary-20251120-e46b3cc/expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.pom.sha1

@@ -1 +0,0 @@
-f5ec0cbc6bd6652eb47448bf6e2279d6a9282aa5

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8-canary-20251120-e46b3cc/expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.pom.sha256

@@ -1 +0,0 @@
-7c1090fc51783bea543b740fccfc9cfd7efd6446ebbb3afc26fa7a1a9d462b47

package/local-maven-repo/host/exp/exponent/expo.modules.securestore/15.0.8-canary-20251120-e46b3cc/expo.modules.securestore-15.0.8-canary-20251120-e46b3cc.pom.sha512

@@ -1 +0,0 @@
-d76a198e5bd81e03741c3c29788fd42b40b189e0def8f7927d4f4a226f978286980ca0c98be1ac46dc2cc2b4e828d3cdb9333ff8766b2b0bfc224f676e2f81ba