freerasp-react-native 1.1.0 → 2.0.0

package/README.md

@@ -14,9 +14,9 @@ freeRASP for React Native is a mobile in-app protection and security monitoring
   - [(Optional) Create a new React Native demo application](#optional-create-a-new-react-native-demo-application)
   - [Step 1: Install the plugin](#step-1-install-the-plugin)
   - [Step 2: Set up the dependencies](#step-2-set-up-the-dependencies)
-  - [Step 3: Dev vs Release version](#step-3-dev-vs-release-version)
-  - [Step 4: Import freeRASP into the app](#step-4-import-freerasp-into-the-app)
-  - [Step 5: Setup the configuration, callbacks and initialize freeRASP](#step-5-setup-the-configuration-callbacks-and-initialize-freerasp)
+  - [Step 3: Import freeRASP into the app](#step-3-import-freerasp-into-the-app)
+  - [Step 4: Setup the configuration, callbacks and initialize freeRASP](#step-4-setup-the-configuration-callbacks-and-initialize-freerasp)
+  - [Step 5: Additional note about obfuscation](#step-5-additional-note-about-obfuscation)
   - [Step 6: User Data Policies](#step-6-user-data-policies)
 - [Security Report](#security-report)
 - [Enterprise Services](#bar_chart-enterprise-services)
@@ -87,20 +87,7 @@ or
 
 ### Android
 
-freeRASP needs to have access to the maven repository containing freeRASP. Add following lines into the `android/build.gradle` file, in the `allprojects.repositories` section:
-
-```gradle
-allprojects {
-    repositories {
-        google()
-        mavenCentral()
-        ... your repositories
-        maven{url = uri("https://nexus3-public.monetplus.cz/repository/ahead-talsec-free-rasp")}
-        maven{url = uri("https://developer.huawei.com/repo/")}
-        maven{url = uri("https://jitpack.io")}
-    }
-}
-```
+_All dependencies of freeRASP for Android are resolved automatically._
 
 ### iOS
 
@@ -108,58 +95,7 @@ freeRASP React Native plugin uses Pods. Navigate to the `ios` folder and run:
 
     $ pod install
 
-## Step 3: Dev vs Release version
-
-The Dev version is used to not complicate the development process of the application, e.g. if you would implement killing of the application on the debugger callback. It disables some checks which won't be triggered during the development process:
-
-- Emulator-usage (simulator)
-- Debugging (debug)
-- Signing (appIntegrity)
-- Unofficial store (unofficialStore)
-
-Which version of freeRASP is used is tied to the application's development stage - more precisely, how the application is compiled.
-
-### Android
-
-Android implementation of the React Native plugin detects selected development stage and automatically applies the suitable version of the library.
-
-- `npx react-native run-android` (debug) -> uses dev version of freeRASP
-- `npx react-native run-android --variant release` (release) -> uses release version of freeRASP
-
-### iOS
-
-For the iOS implemtation, it's neccesary to add script into the Xcode environment, that automatically switches between the library dev/release versions according to selected development stage. Then, it is necessary to embedd a symlink to correct TalsecRuntime.xcframework.
-
-1.  Add pre-built script for changing the Debug and Release versions of the framework:
-    - Open up the **.xcworkspace** file
-    - Go to **Product** -> **Scheme** -> **Edit Scheme...** -> **Build (dropdown arrow)** -> **Pre-actions**
-    - Hit **+** and then **New Run Script Action**
-    - Set **Provide build setting from** to your application
-    - Copy-paste following script:
-      ```shell
-      cd "${SRCROOT}/../node_modules/freerasp-react-native/ios"
-      if [ "${CONFIGURATION}" = "Release" ]; then
-          rm -rf ./TalsecRuntime.xcframework
-          ln -s ./Release/TalsecRuntime.xcframework/ TalsecRuntime.xcframework
-      else
-          rm -rf ./TalsecRuntime.xcframework
-          ln -s ./Debug/TalsecRuntime.xcframework/ TalsecRuntime.xcframework
-      fi
-      ```
-    - **Close**
-2.  Add dependency on the symlink
-    - Go to your **Target** -> **Build Phases** -> **Link Binary With Libraries**
-    - Add dependency (drag & drop right after **libPods**) on the symlink on the following location:
-      _AwesomeProject/node_modules/freerasp-react-native/ios/TalsecRuntime.xcframework_
-    - If there is no symlink, try to create it manually in that folder by the following command:
-    -     $ ln -s ./Debug/TalsecRuntime.xcframework/ TalsecRuntime.xcframework
-
-Followingly:
-
-- `npx react-native run-ios` (debug) -> uses dev version of freeRASP
-- `npx react-native run-ios --configuration Release` (release) -> uses release version of freeRASP
-
-## Step 4: Import freeRASP into the app
+## Step 3: Import freeRASP into the app
 
 We provide a custom hook that handles all required logic as registration of freeRASP, mounting and unmounting of listeners for you. Import the hook into your app:
 
@@ -167,31 +103,13 @@ We provide a custom hook that handles all required logic as registration of free
 import { useFreeRasp } from 'freerasp-react-native';
 ```
 
-## Step 5: Setup the configuration, callbacks and initialize freeRASP
+## Step 4: Setup the configuration, callbacks and initialize freeRASP
 
-First, the configuration and callbacks will be explained. Then the **Initialization** chapter shows the implementation.
+First, the configuration and callbacks will be explained. Then the [Initialization](#initialization) chapter shows the implementation.
 
 ### Configuration
 
-You need to provide configuration for freeRASP to work properly and initialize it. The freeRASP configuration contains configs for both Android and iOS. You must fill all the required values for the plugin to work.
-
-For Android:
-
-- `packageName` - package name of your app you chose when you created it
-- `certificateHashes` - hash of the certificate of the key which was used to sign the application. **Hash which is passed here must be encoded in Base64 form.** If you are not sure how to get your certificate hash, you can check out the guide on our [Github wiki](https://github.com/talsec/Free-RASP-Community/wiki/Getting-your-signing-certificate-hash-of-app). Multiple hashes are supported, e.g. if you are using a different one for the Huawei App Gallery.
-- `supportedAlternativeStores` _(optional)_ - If you publish on the Google Play Store and/or Huawei AppGallery, you **don't have to assign anything** there as those are supported out of the box.
-
-For iOS similarly to Android, `appBundleId` and `appTeamId` are required.
-
-Lastly, pass a mail address to `watcherMail` to be able to get reports. Mail has a strict form `name@domain.com` which is passed as String.
-
-### Callbacks
-
-freeRASP executes periodical checks when the application is running. Handle the detected threats in the **listeners**. For example, you can log the event, show a window to the user or kill the application. Visit our [wiki](https://github.com/talsec/Free-RASP-Community/wiki/Threat-detection) to learn more details about the performed checks and their importance for app security.
-
-### Initialization
-
-You should initialize the freeRASP in the entry point to your app, which is usually in `App.jsx` or `App.tsx`. Just copy & paste this code inside your root component / function, then setup the configuration and reactions to listeners:
+You need to provide configuration for freeRASP to work properly and initialize it. The freeRASP configuration is an JavaScript object that contains configs for both Android and iOS, as well as common configuration. You must fill all the required values for the plugin to work. Use the following template to provide configuration to the Talsec plugin. You can find detailed description of the configuration below.
 
 ```ts
 // app configuration
@@ -206,52 +124,88 @@ const config = {
     appTeamId: 'your_team_ID',
   },
   watcherMail: 'your_email_address@example.com',
+  isProd: true,
 };
+```
+
+#### The configuration object should consist of:
 
+1. `androidConfig` _: object | undefined_ - required for Android devices, has following keys:
+
+   - `packageName` _: string_ - package name of your app you chose when you created it
+   - `certificateHashes` _: string[]_ - hash of the certificate of the key which was used to sign the application. **Hash which is passed here must be encoded in Base64 form.** If you are not sure how to get your certificate hash, you can check out the guide on our [Github wiki](https://github.com/talsec/Free-RASP-Community/wiki/Getting-your-signing-certificate-hash-of-app). Multiple hashes are supported, e.g. if you are using a different one for the Huawei App Gallery.
+   - `supportedAlternativeStores` _: string[] | undefined_ - If you publish on the Google Play Store and/or Huawei AppGallery, you **don't have to assign anything** there as those are supported out of the box.
+
+1. `iosConfig` _: object | undefined_ - required for iOS devices, has following keys:
+   - `appBundleId` _: string_ - Bundle ID of your app
+   - `appTeamId` _: string_ - the Apple Team ID
+1. `watcherMail` _: string_ - your mail address where you wish to receive reports. Mail has a strict form `name@domain.com` which is passed as String.
+1. `isProd` _: boolean | undefined_ - defaults to `true` when undefined. If you want to use the Dev version to disable checks described [in the chapter below](#dev-vs-release-version), set the parameter to `false`. Make sure that you have the Release version in the production (i.e. isProd set to true)!
+
+If you are developing only for one of the platforms, you can skip the configuration part for the other one, i.e., delete the unused configuration.
+
+#### Dev vs Release version
+
+The Dev version is used to not complicate the development process of the application, e.g. if you would implement killing of the application on the debugger callback. It disables some checks which won't be triggered during the development process:
+
+- Emulator-usage (simulator)
+- Debugging (debug)
+- Signing (appIntegrity)
+- Unofficial store (unofficialStore)
+
+### Callbacks
+
+freeRASP executes periodical checks when the application is running. Handle the detected threats in the **listeners**. For example, you can log the event, show a window to the user or kill the application. [Visit our wiki](https://github.com/talsec/Free-RASP-Community/wiki/Threat-detection) to learn more details about the performed checks and their importance for app security.
+
+### Initialization
+
+You should initialize the freeRASP in the entry point to your app, which is usually in `App.jsx` or `App.tsx`. Just copy & paste this code inside your root component / function, then setup the configuration and reactions to listeners:
+
+```ts
 // reactions for detected threats
 const actions = {
   // Android & iOS
-  'privilegedAccess': () => {
+  privilegedAccess: () => {
     console.log('privilegedAccess');
   },
   // Android & iOS
-  'debug': () => {
+  debug: () => {
     console.log('debug');
   },
   // Android & iOS
-  'simulator': () => {
+  simulator: () => {
     console.log('simulator');
   },
   // Android & iOS
-  'appIntegrity': () => {
+  appIntegrity: () => {
     console.log('appIntegrity');
   },
   // Android & iOS
-  'unofficialStore': () => {
+  unofficialStore: () => {
     console.log('unofficialStore');
   },
   // Android & iOS
-  'hooks': () => {
+  hooks: () => {
     console.log('hooks');
   },
   // Android & iOS
-  'device binding': () => {
-    console.log('device binding');
+  deviceBinding: () => {
+    console.log('deviceBinding');
   },
   // Android & iOS
-  'secureHardwareNotAvailable': () => {
+  secureHardwareNotAvailable: () => {
     console.log('secureHardwareNotAvailable');
   },
   // Android & iOS
-  'passcode': () => {
+  passcode: () => {
     console.log('passcode');
   },
   // iOS only
-  'deviceID': () => {
+  deviceID: () => {
     console.log('deviceID');
   },
   // iOS only
-  'passcodeChange': () => {
+  passcodeChange: () => {
     console.log('passcodeChange');
   },
 };
@@ -261,7 +215,34 @@ useFreeRasp(config, actions);
 
 When freeRASP initializes correctly, you should see `freeRASP initialized` message in logs. Otherwise, you'll see warning with description of what went wrong.
 
-_You can override this default behavior by extending the `actions` object with `'started'` key (to change action after successful initialization), and `'initializationError'` key (to set up action after unsuccessful initialization)_
+_You can override this default behavior by extending the `actions` object with `started` key (to change action after successful initialization), and `initializationError` key (to set up action after unsuccessful initialization)_
+
+## Step 5: Additional note about obfuscation
+
+The freeRASP contains public API, so the integration process is as simple as possible. Unfortunately, this public API also creates opportunities for the attacker to use publicly available information to interrupt freeRASP operations or modify your custom reaction implementation in threat callbacks. In order for freeRASP to be as effective as possible, it is highly recommended to apply obfuscation to the final package/application, making the public API more difficult to find and also partially randomized for each application so it cannot be automatically abused by generic hooking scripts.
+
+### Android
+
+The majority of Android projects support code shrinking and obfuscation without any additional need for setup. The owner of the project can define the set of rules that are usually automatically used when the application is built in the release mode. For more information, please visit the official documentation
+
+- https://developer.android.com/studio/build/shrink-code
+- https://www.guardsquare.com/manual/configuration/usage
+
+You can make sure, that the obfuscation is enabled by checking the value of **minifyEnabled** property in your **module's build.gradle** file.
+
+```gradle
+android {
+    ...
+
+    buildTypes {
+        release {
+            minifyEnabled true
+            shrinkResources true
+            proguardFiles getDefaultProguardFile('proguard-android.txt'), 'proguard-rules.pro'
+        }
+    }
+}
+```
 
 ## Step 6: User Data Policies
 
@@ -427,7 +408,7 @@ Learn more about commercial features at [https://talsec.app](https://talsec.app/
          <td colspan=5><strong>Fair usage policy</strong></td>
         </tr>
         <tr>
-            <td>Mentioning of the app name in Talsec marketing communication (e.g. "Trusted by Talsec section" on social media)</td>
+            <td>Mentioning of the App name and logo in the marketing communications of Talsec (e.g. "Trusted by" section of the Talsec web or in the social media).</td>
             <td>over 100k downloads</td>
             <td>no</td>
         </tr>

package/android/build.gradle

@@ -61,9 +61,13 @@ android {
 repositories {
   mavenCentral()
   google()
-  maven{url = uri("https://nexus3-public.monetplus.cz/repository/ahead-talsec-free-rasp")}
-  maven{url = uri("https://developer.huawei.com/repo/")}
-  maven{url = uri("https://jitpack.io")}
+}
+
+rootProject.allprojects {
+  repositories {
+    maven{url "https://nexus3-public.monetplus.cz/repository/ahead-talsec-free-rasp"}
+    maven{url "https://jitpack.io"}
+  }
 }
 
 def kotlin_version = getExtOrDefault("kotlinVersion")
@@ -74,8 +78,7 @@ dependencies {
   //noinspection GradleDynamicVersion
   implementation "com.facebook.react:react-native"
   implementation "org.jetbrains.kotlin:kotlin-stdlib:$kotlin_version"
-  debugImplementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:6.0.0-dev"
-  releaseImplementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:6.0.0-release"
+  implementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:7.0.0"
 }
 
 if (isNewArchitectureEnabled()) {

package/android/src/main/java/com/freeraspreactnative/FreeraspReactNativeModule.kt

@@ -12,7 +12,8 @@ import com.facebook.react.bridge.ReadableMap
 import com.facebook.react.modules.core.DeviceEventManagerModule
 
 class FreeraspReactNativeModule(val reactContext: ReactApplicationContext) :
-  ReactContextBaseJavaModule(reactContext), ThreatListener.ThreatDetected, FreeraspDeviceStateListener.DeviceStateListener {
+  ReactContextBaseJavaModule(reactContext), ThreatListener.ThreatDetected,
+  FreeraspDeviceStateListener.DeviceStateListener {
 
   private val listener = ThreatListener(this, FreeraspDeviceStateListener)
 
@@ -75,7 +76,7 @@ class FreeraspReactNativeModule(val reactContext: ReactApplicationContext) :
   }
 
   override fun onDeviceBindingDetected() {
-    sendOngoingPluginResult("device binding", null)
+    sendOngoingPluginResult("deviceBinding", null)
   }
 
   override fun deviceStateChangeDetected(threatType: String) {
@@ -104,7 +105,18 @@ class FreeraspReactNativeModule(val reactContext: ReactApplicationContext) :
         alternativeStores.add(stores.getString(i))
       }
     }
-    return TalsecConfig(packageName, certificateHashes.toTypedArray(), watcherMail, alternativeStores.toTypedArray())
+    var isProd = true
+    if (config.hasKey("isProd")) {
+      isProd = config.getBoolean("isProd")
+    }
+
+    return TalsecConfig(
+      packageName,
+      certificateHashes.toTypedArray(),
+      watcherMail,
+      alternativeStores.toTypedArray(),
+      isProd
+    )
   }
 
   companion object {

package/example/android/build.gradle

@@ -46,8 +46,5 @@ allprojects {
       }
     }
     google()
-    maven { url 'https://www.jitpack.io' }
-    maven{url = uri("https://nexus3-public.monetplus.cz/repository/ahead-talsec-free-rasp")}
-    maven{url = uri("https://developer.huawei.com/repo/")}
   }
 }

package/example/ios/FreeraspReactNativeExample.xcodeproj/project.pbxproj

@@ -14,7 +14,6 @@
 		13B07FC11A68108700A75B9A /* main.m in Sources */ = {isa = PBXBuildFile; fileRef = 13B07FB71A68108700A75B9A /* main.m */; };
 		7699B88040F8A987B510C191 /* libPods-FreeraspReactNativeExample-FreeraspReactNativeExampleTests.a in Frameworks */ = {isa = PBXBuildFile; fileRef = 19F6CBCC0A4E27FBF8BF4A61 /* libPods-FreeraspReactNativeExample-FreeraspReactNativeExampleTests.a */; };
 		81AB9BB82411601600AC10FF /* LaunchScreen.storyboard in Resources */ = {isa = PBXBuildFile; fileRef = 81AB9BB72411601600AC10FF /* LaunchScreen.storyboard */; };
-		A41E05192962BAB100B363A8 /* TalsecRuntime.xcframework in Frameworks */ = {isa = PBXBuildFile; fileRef = A44E6986295D7CAB000A719C /* TalsecRuntime.xcframework */; };
 /* End PBXBuildFile section */
 
 /* Begin PBXContainerItemProxy section */
@@ -44,6 +43,8 @@
 		5DCACB8F33CDC322A6C60F78 /* libPods-FreeraspReactNativeExample.a */ = {isa = PBXFileReference; explicitFileType = archive.ar; includeInIndex = 0; path = "libPods-FreeraspReactNativeExample.a"; sourceTree = BUILT_PRODUCTS_DIR; };
 		81AB9BB72411601600AC10FF /* LaunchScreen.storyboard */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = file.storyboard; name = LaunchScreen.storyboard; path = FreeraspReactNativeExample/LaunchScreen.storyboard; sourceTree = "<group>"; };
 		89C6BE57DB24E9ADA2F236DE /* Pods-FreeraspReactNativeExample-FreeraspReactNativeExampleTests.release.xcconfig */ = {isa = PBXFileReference; includeInIndex = 1; lastKnownFileType = text.xcconfig; name = "Pods-FreeraspReactNativeExample-FreeraspReactNativeExampleTests.release.xcconfig"; path = "Target Support Files/Pods-FreeraspReactNativeExample-FreeraspReactNativeExampleTests/Pods-FreeraspReactNativeExample-FreeraspReactNativeExampleTests.release.xcconfig"; sourceTree = "<group>"; };
+		8C2BD8B529DF06E4000304E9 /* Talsec */ = {isa = PBXFileReference; lastKnownFileType = folder; name = Talsec; path = ../../ios/Talsec; sourceTree = "<group>"; };
+		8C2BD8BB29DF0976000304E9 /* TalsecRuntime.xcframework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.xcframework; name = TalsecRuntime.xcframework; path = ../../ios/Talsec/TalsecRuntime.xcframework; sourceTree = "<group>"; };
 		A41E05172962B9FD00B363A8 /* TalsecRuntime.xcframework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.xcframework; name = TalsecRuntime.xcframework; path = "../../../../React/test2/someTestProject/node_modules/freerasp-react-native/ios/TalsecRuntime.xcframework"; sourceTree = "<group>"; };
 		A44E6986295D7CAB000A719C /* TalsecRuntime.xcframework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.xcframework; name = TalsecRuntime.xcframework; path = ../../ios/TalsecRuntime.xcframework; sourceTree = "<group>"; };
 		A44E698B295D7E12000A719C /* TalsecRuntime.xcframework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.xcframework; name = TalsecRuntime.xcframework; path = ../../ios/Debug/TalsecRuntime.xcframework; sourceTree = "<group>"; };
@@ -65,7 +66,6 @@
 			buildActionMask = 2147483647;
 			files = (
 				0C80B921A6F3F58F76C31292 /* libPods-FreeraspReactNativeExample.a in Frameworks */,
-				A41E05192962BAB100B363A8 /* TalsecRuntime.xcframework in Frameworks */,
 			);
 			runOnlyForDeploymentPostprocessing = 0;
 		};
@@ -105,6 +105,8 @@
 		2D16E6871FA4F8E400B85C8A /* Frameworks */ = {
 			isa = PBXGroup;
 			children = (
+				8C2BD8BB29DF0976000304E9 /* TalsecRuntime.xcframework */,
+				8C2BD8B529DF06E4000304E9 /* Talsec */,
 				A44E6986295D7CAB000A719C /* TalsecRuntime.xcframework */,
 				A44E698B295D7E12000A719C /* TalsecRuntime.xcframework */,
 				A44E69A2295DA98F000A719C /* TalsecRuntime.xcframework */,

package/example/ios/FreeraspReactNativeExample.xcodeproj/xcshareddata/xcschemes/FreeraspReactNativeExample.xcscheme

@@ -1,28 +1,10 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <Scheme
    LastUpgradeVersion = "1210"
-   version = "1.7">
+   version = "1.3">
    <BuildAction
       parallelizeBuildables = "YES"
       buildImplicitDependencies = "YES">
-      <PreActions>
-         <ExecutionAction
-            ActionType = "Xcode.IDEStandardExecutionActionsCore.ExecutionActionType.ShellScriptAction">
-            <ActionContent
-               title = "Run Script"
-               scriptText = "cd &quot;${SRCROOT}/../../ios&quot;&#10;if [ &quot;${CONFIGURATION}&quot; = &quot;Release&quot; ]; then&#10;    rm -rf ./TalsecRuntime.xcframework&#10;    ln -s ./Release/TalsecRuntime.xcframework/ TalsecRuntime.xcframework&#10;else&#10;    rm -rf ./TalsecRuntime.xcframework&#10;    ln -s ./Debug/TalsecRuntime.xcframework/ TalsecRuntime.xcframework&#10;fi &#10;">
-               <EnvironmentBuildable>
-                  <BuildableReference
-                     BuildableIdentifier = "primary"
-                     BlueprintIdentifier = "13B07F861A680F5B00A75B9A"
-                     BuildableName = "FreeraspReactNativeExample.app"
-                     BlueprintName = "FreeraspReactNativeExample"
-                     ReferencedContainer = "container:FreeraspReactNativeExample.xcodeproj">
-                  </BuildableReference>
-               </EnvironmentBuildable>
-            </ActionContent>
-         </ExecutionAction>
-      </PreActions>
       <BuildActionEntries>
          <BuildActionEntry
             buildForTesting = "YES"

package/example/ios/Podfile.lock

@@ -548,7 +548,7 @@ SPEC CHECKSUMS:
   Flipper-RSocket: d9d9ade67cbecf6ac10730304bf5607266dd2541
   FlipperKit: cbdee19bdd4e7f05472a66ce290f1b729ba3cb86
   fmt: ff9d55029c625d3757ed641535fd4a75fedc7ce9
-  freerasp-react-native: 402dcc7a34804b8ae4805f18c79666e606d24b1e
+  freerasp-react-native: 68f18a583428d1bbb484228abdb3b9cd258795b4
   glog: 04b94705f318337d7ead9e6d17c019bd9b1f6b1b
   hermes-engine: 2af7b7a59128f250adfd86f15aa1d5a2ecd39995
   libevent: 4049cae6c81cdb3654a443be001fb9bdceff7913

package/example/src/App.tsx

@@ -22,11 +22,12 @@ const App = () => {
       appTeamId: 'your_team_ID',
     },
     watcherMail: 'your_email_address@example.com',
+    isProd: true,
   };
 
   const actions = {
     // Android & iOS
-    'privilegedAccess': () => {
+    privilegedAccess: () => {
       setAppChecks((currentState) =>
         currentState.map((threat) =>
           threat.name === 'Privileged Access'
@@ -36,7 +37,7 @@ const App = () => {
       );
     },
     // Android & iOS
-    'debug': () => {
+    debug: () => {
       setAppChecks((currentState) =>
         currentState.map((threat) =>
           threat.name === 'Debug' ? { ...threat, status: 'nok' } : threat
@@ -44,7 +45,7 @@ const App = () => {
       );
     },
     // Android & iOS
-    'simulator': () => {
+    simulator: () => {
       setAppChecks((currentState) =>
         currentState.map((threat) =>
           threat.name === 'Simulator' ? { ...threat, status: 'nok' } : threat
@@ -52,7 +53,7 @@ const App = () => {
       );
     },
     // Android & iOS
-    'appIntegrity': () => {
+    appIntegrity: () => {
       setAppChecks((currentState) =>
         currentState.map((threat) =>
           threat.name === 'App Integrity'
@@ -62,7 +63,7 @@ const App = () => {
       );
     },
     // Android & iOS
-    'unofficialStore': () => {
+    unofficialStore: () => {
       setAppChecks((currentState) =>
         currentState.map((threat) =>
           threat.name === 'Unofficial Store'
@@ -72,7 +73,7 @@ const App = () => {
       );
     },
     // Android & iOS
-    'hooks': () => {
+    hooks: () => {
       setAppChecks((currentState) =>
         currentState.map((threat) =>
           threat.name === 'Hooks' ? { ...threat, status: 'nok' } : threat
@@ -80,7 +81,7 @@ const App = () => {
       );
     },
     // Android & iOS
-    'device binding': () => {
+    deviceBinding: () => {
       setAppChecks((currentState) =>
         currentState.map((threat) =>
           threat.name === 'Device Binding'
@@ -90,7 +91,7 @@ const App = () => {
       );
     },
     // Android & iOS
-    'secureHardwareNotAvailable': () => {
+    secureHardwareNotAvailable: () => {
       setAppChecks((currentState) =>
         currentState.map((threat) =>
           threat.name === 'Secure Hardware Not Available'
@@ -100,7 +101,7 @@ const App = () => {
       );
     },
     // Android & iOS
-    'passcode': () => {
+    passcode: () => {
       setAppChecks((currentState) =>
         currentState.map((threat) =>
           threat.name === 'Passcode' ? { ...threat, status: 'nok' } : threat
@@ -108,7 +109,7 @@ const App = () => {
       );
     },
     // iOS only
-    'deviceID': () => {
+    deviceID: () => {
       setAppChecks((currentState) =>
         currentState.map((threat) =>
           threat.name === 'Device ID' ? { ...threat, status: 'nok' } : threat
@@ -116,7 +117,7 @@ const App = () => {
       );
     },
     // iOS only
-    'passcodeChange': () => {
+    passcodeChange: () => {
       setAppChecks((currentState) =>
         currentState.map((threat) =>
           threat.name === 'Passcode Change'

package/freerasp-react-native.podspec

@@ -15,7 +15,7 @@ Pod::Spec.new do |s|
   s.source       = { :git => "https://github.com/talsec/freerasp-react-native.git", :tag => "#{s.version}" }
 
   s.source_files = "ios/**/*.{h,m,mm,swift}"
-  s.ios.vendored_frameworks = "ios/Debug/TalsecRuntime.xcframework"
+  s.ios.vendored_frameworks = "ios/TalsecRuntime.xcframework"
   
   s.dependency "React-Core"
 

package/ios/FreeraspReactNative.swift

@@ -3,14 +3,14 @@ import TalsecRuntime
 
 @objc(FreeraspReactNative)
 class FreeraspReactNative: RCTEventEmitter {
-    
+
     public static var shared:FreeraspReactNative?
-    
+
     override init() {
         super.init()
         FreeraspReactNative.shared = self
     }
-    
+
     @objc(talsecStart:)
     func talsecStart(options: NSDictionary) -> Void {
         do {
@@ -22,7 +22,7 @@ class FreeraspReactNative: RCTEventEmitter {
         }
         self.sendEvent(withName: "started", body: "started")
     }
-    
+
     func initializeTalsec(talsecConfig: NSDictionary) throws {
         guard let iosConfig = talsecConfig["iosConfig"] as? NSDictionary else {
             throw NSError(domain: "Missing iosConfig parameter in Talsec Native Plugin", code: 1)
@@ -36,22 +36,27 @@ class FreeraspReactNative: RCTEventEmitter {
         guard let watcherMailAddress = talsecConfig["watcherMail"] as? String else {
             throw NSError(domain: "Missing watcherMail parameter in Talsec Native Plugin", code: 4)
         }
-        let config = TalsecConfig(appBundleIds: [appBundleIds], appTeamId: appTeamId, watcherMailAddress: watcherMailAddress)
+        let isProd = talsecConfig["isProd"] as? Bool ?? true
+
+        let config = TalsecConfig(appBundleIds: [appBundleIds], appTeamId: appTeamId, watcherMailAddress: watcherMailAddress, isProd: isProd)
         Talsec.start(config: config)
     }
-    
+
     override func supportedEvents() -> [String]! {
-        return ["initializationError", "started", "privilegedAccess", "debug", "simulator", "appIntegrity", "unofficialStore", "hooks", "device binding", "deviceID", "secureHardwareNotAvailable", "passcodeChange", "passcode"]
+        return ["initializationError", "started", "privilegedAccess", "debug", "simulator", "appIntegrity", "unofficialStore", "hooks", "deviceBinding", "deviceID", "secureHardwareNotAvailable", "passcodeChange", "passcode"]
     }
 }
 
 extension SecurityThreatCenter: SecurityThreatHandler {
     public func threatDetected(_ securityThreat: TalsecRuntime.SecurityThreat) {
         // It is better to implement security reactions (e.g. killing the app) here.
-        if (securityThreat.rawValue == "missingSecureEnclave") {
-            FreeraspReactNative.shared!.sendEvent(withName: "secureHardwareNotAvailable", body: "secureHardwareNotAvailable")
-        } else {
-            FreeraspReactNative.shared!.sendEvent(withName: securityThreat.rawValue, body: securityThreat.rawValue)
+        switch securityThreat.rawValue {
+            case "missingSecureEnclave":
+                FreeraspReactNative.shared!.sendEvent(withName: "secureHardwareNotAvailable", body: "secureHardwareNotAvailable")
+            case "device binding":
+                FreeraspReactNative.shared!.sendEvent(withName: "deviceBinding", body: "deviceBinding")
+            default:
+                FreeraspReactNative.shared!.sendEvent(withName: securityThreat.rawValue, body: securityThreat.rawValue)
         }
     }
 }

package/ios/{Debug/TalsecRuntime.xcframework/ios-arm64_x86_64-simulator → TalsecRuntime.xcframework/ios-arm64}/TalsecRuntime.framework/Headers/CurlWrapper.h

@@ -16,7 +16,7 @@
 #include <unistd.h>
 #include <string.h>
 
-struct tKmUaogdBLYY {
+struct MAJceCaWrKur {
     char *memory;
     size_t size;
     CURLcode ret;

package/ios/{Release/TalsecRuntime.xcframework → TalsecRuntime.xcframework}/ios-arm64/TalsecRuntime.framework/Headers/TalsecRuntime-Swift.h

@@ -213,7 +213,7 @@ typedef unsigned int swift_uint4  __attribute__((__ext_vector_type__(4)));
 #endif
 
 
-SWIFT_EXTERN void __rlcIIALfXLFTiZtCZbETeyK(void);
+SWIFT_EXTERN void __UAEjWMMMrsiAVWBJDVKWmuV(void);
 
 #if __has_attribute(external_source_symbol)
 # pragma clang attribute pop

package/ios/{Debug/TalsecRuntime.xcframework → TalsecRuntime.xcframework}/ios-arm64/TalsecRuntime.framework/Modules/TalsecRuntime.swiftmodule/arm64-apple-ios.swiftinterface

@@ -19,7 +19,8 @@ public struct TalsecConfig {
   public let appBundleIds: [Swift.String]
   public let appTeamId: Swift.String
   public let watcherMailAddress: Swift.String?
-  public init(appBundleIds: [Swift.String], appTeamId: Swift.String, watcherMailAddress: Swift.String?)
+  public let isProd: Swift.Bool?
+  public init(appBundleIds: [Swift.String], appTeamId: Swift.String, watcherMailAddress: Swift.String?, isProd: Swift.Bool? = true)
 }
 @_hasMissingDesignatedInitializers public class Talsec {
   public static func start(config: TalsecRuntime.TalsecConfig)

package/ios/{Release/TalsecRuntime.xcframework/ios-arm64 → TalsecRuntime.xcframework/ios-arm64_x86_64-simulator}/TalsecRuntime.framework/Headers/CurlWrapper.h

@@ -16,7 +16,7 @@
 #include <unistd.h>
 #include <string.h>
 
-struct DSWgsmUJiZMF {
+struct MAJceCaWrKur {
     char *memory;
     size_t size;
     CURLcode ret;