freerasp-react-native 3.3.0 → 3.4.0

package/README.md

@@ -1,6 +1,6 @@
 ![FreeRasp](https://raw.githubusercontent.com/talsec/Free-RASP-Community/master/visuals/freeRASPforRN.png)
 
-![GitHub Repo stars](https://img.shields.io/github/stars/talsec/Free-RASP-Community?color=green) ![GitHub](https://img.shields.io/github/license/talsec/Free-RASP-Community) ![GitHub](https://img.shields.io/github/last-commit/talsec/Free-RASP-Community) ![Publisher](https://img.shields.io/pub/publisher/freerasp)
+![GitHub Repo stars](https://img.shields.io/github/stars/talsec/Free-RASP-Community?color=green) ![GitHub](https://img.shields.io/github/license/talsec/Free-RASP-Community) ![GitHub](https://img.shields.io/github/last-commit/talsec/Free-RASP-Community) ![Publisher](https://img.shields.io/pub/publisher/freerasp) [![42matters](https://42matters.com/badges/sdk-installations/freerasp)](https://42matters.com/sdks/android/freerasp)
 
 # freeRASP for React Native
 
@@ -25,7 +25,7 @@ freeRASP for React Native is a mobile in-app protection and security monitoring
   - [Step 6: User Data Policies](#step-6-user-data-policies)
 - [Troubleshooting](#troubleshooting)
 - [Security Report](#security-report)
-- [Commercial versions (RASP+ and more)](#bar_chart-commercial-versions-rasp-and-more)
+- [Talsec Commercial Subscriptions](#money_with_wings-talsec-commercial-subscriptions)
   - [Plans Comparison](#plans-comparison)
 - [About Us](#about-us)
 - [License](#license)
@@ -147,7 +147,7 @@ const config = {
   androidConfig: {
     packageName: 'com.awesomeproject',
     certificateHashes: ['your_signing_certificate_hash_base64'],
-    // supportedAlternativeStores: ['storeOne', 'storeTwo'],
+    supportedAlternativeStores: ['com.sec.android.app.samsungapps'],
   },
   iosConfig: {
     appBundleId: 'com.awesomeproject',
@@ -164,7 +164,7 @@ const config = {
 
    - `packageName` _: string_ - package name of your app you chose when you created it
    - `certificateHashes` _: string[]_ - hash of the certificate of the key which was used to sign the application. **Hash which is passed here must be encoded in Base64 form.** If you are not sure how to get your certificate hash, you can check out the guide on our [Github wiki](https://github.com/talsec/Free-RASP-Community/wiki/Getting-your-signing-certificate-hash-of-app). Multiple hashes are supported, e.g. if you are using a different one for the Huawei App Gallery.
-   - `supportedAlternativeStores` _: string[] | undefined_ - If you publish on the Google Play Store and/or Huawei AppGallery, you **don't have to assign anything** there as those are supported out of the box.
+   - `supportedAlternativeStores` _: string[] | undefined_ - Google Play Store and Huawei AppGallery are supported out of the box, you **don't have to assign anything**. You can add other stores like the Samsung Galaxy Store in the example code (```com.sec.android.app.samsungapps```). For more information, visit the  [Detecting Unofficial Installation](https://github.com/talsec/Free-RASP-Community/wiki/Threat-detection#detecting-unofficial-installation) wiki page.
 
 1. `iosConfig` _: object | undefined_ - required for iOS devices, has following keys:
    - `appBundleId` _: string_ - Bundle ID of your app
@@ -364,6 +364,19 @@ useEffect(() => {
 
 Where `actions`, `config` are objects described in previous chapters.
 
+### Unsupported Swift architecture
+
+**Reason:**
+The arm64 macro is not set under Rosetta.
+
+**Solution:**
+Go to `<your_project>/node_modules/freerasp-react-native/ios/TalsecRuntime.xcframework/ios-arm64/TalsecRuntime.framework/Headers/TalsecRuntime-Swift.h` and move following code (lines 4 and 5 in the file) to the top of the file:
+
+```
+#ifndef TALSECRUNTIME_SWIFT_H
+#define TALSECRUNTIME_SWIFT_H
+```
+
 # Security Report
 
 The Security Report is a weekly summary describing the application's security state and characteristics of the devices it runs on in a practical and easy-to-understand way.
@@ -374,22 +387,28 @@ To receive Security Reports, fill out the _watcherMail_ field in [config](#confi
 
 ![dashboard](https://raw.githubusercontent.com/talsec/Free-RASP-Community/master/visuals/dashboard.png)
 
-# :bar_chart: Commercial versions (RASP+ and more)
+# :money_with_wings: Talsec Commercial Subscriptions 
+Talsec offers commercial plans on top of freeRASP (Business RASP+):
+* No limits of Fair Usage Policy (100K App Downloads) 
+* No Data Collection from your app
+* FinTech grade security, features and SLA (see more in [this post](https://github.com/orgs/talsec/discussions/5))
+* Protect APIs and risk scoring by AppiCrypt®
 
-We provide app security hardening SDK: i.e. AppiCrypt®, Customer Data Encryption (local storage), End-to-end encryption, Strings protection (e.g. API keys) and Dynamic Certificate Pinning to our commercial customers as well. To get the most advanced protection compliant with PSD2 RT and eIDAS and support from our experts, contact us at [talsec.app](https://talsec.app).
+Learn more at [talsec.app](https://talsec.app).
 
-The commercial version provides a top-notch protection level, extra features, support, and maintenance. One of the most valued commercial features is [AppiCrypt®](https://www.talsec.app/appicrypt) - App Integrity Cryptogram.
+Not to overlook, the one of the most valued commercial features is [AppiCrypt®](https://www.talsec.app/appicrypt) - App Integrity Cryptogram.
 
-It allows easy to implement API protection and App Integrity verification on the backend to prevent API abuse:
+It allows easy-to-implement API protection and App Integrity verification on the backend to prevent API abuse:
 
-- Bruteforce attacks
-- Botnets
-- Session-hijacking
-- DDoS
+-   Bruteforce attacks
+-   Botnets
+-   API abuse by App impersonation
+-   Session-hijacking
+-   DDoS
 
 It is a unified solution that works across all mobile platforms without dependency on external web services (i.e., without extra latency, an additional point of failure, and maintenance costs).
 
-Learn more about commercial features at [https://talsec.app](https://talsec.app/).
+Learn more about commercial features at [talsec.app](https://talsec.app).
 
 **TIP:** You can try freeRASP and then upgrade easily to an enterprise service.
 

package/android/build.gradle

@@ -85,7 +85,7 @@ dependencies {
   //noinspection GradleDynamicVersion
   implementation "com.facebook.react:react-native"
   implementation "org.jetbrains.kotlin:kotlin-stdlib:$kotlin_version"
-  implementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:8.0.4"
+  implementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:8.3.0"
 }
 
 if (isNewArchitectureEnabled()) {

package/freerasp-react-native.podspec

@@ -14,7 +14,8 @@ Pod::Spec.new do |s|
   s.platforms    = { :ios => "11.0" }
   s.source       = { :git => "https://github.com/talsec/freerasp-react-native.git", :tag => "#{s.version}" }
 
-  s.source_files = "ios/**/*.{h,m,mm,swift}"
+  s.source_files = 'ios/*.{h,m,mm,swift}', 'ios/TalsecRuntime.xcframework'
+  s.xcconfig = { 'OTHER_LDFLAGS' => '-framework TalsecRuntime' }
   s.ios.vendored_frameworks = "ios/TalsecRuntime.xcframework"
   
   s.dependency "React-Core"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "freerasp-react-native",
-  "version": "3.3.0",
+  "version": "3.4.0",
   "description": "React Native plugin for improving app security and threat monitoring on Android and iOS mobile devices.",
   "main": "lib/commonjs/index",
   "module": "lib/module/index",