freerasp-react-native 3.6.1 → 3.7.1-1

package/CHANGELOG.md

@@ -0,0 +1,187 @@
+# freeRASP 3.7.1
+
+### Android
+
+- ⚡ Updated freeRASP SDK artifact hosting ensuring better stability and availibility
+- ⚡ Fixed compatibility issues with RN < 0.63
+
+# freeRASP 3.7.0
+
+- ⚡ Added support for apps built with Expo SDK
+- 📄 Documentation updates
+
+### Android
+
+- ⚡ Shortened duration of threat evaluation
+- ⚡ Fixed a native crash bug during one of the native root checks (detected after NDK upgrade)
+- ⚡ Improved _appIntegrity_ check and its logging
+- ⚡ Updated `CURL` to `8.5.0` and `OpenSSL` to `1.1.1w`
+
+### iOS
+
+- ❗ Added Privacy Manifest
+- ❗ Added codesigning for the SDK, it is signed by:
+  - _Team ID_: `ASQC376HCN`
+  - _Team Name_: `AHEAD iTec, s.r.o.`
+- ⚡ Improved obfuscation of Swift and C strings
+- ⚡ Fixed memory leak ([freeRASP iOS issue #13](https://github.com/talsec/Free-RASP-iOS/issues/13))
+- ⚡ Updated `CURL` to `8.5.0` and `OpenSSL` to `1.1.1w`
+
+# freeRASP 3.6.1
+
+- 📄 Documentation updates
+
+### iOS
+
+- ⚡ Fixed bug that caused app being killed in specific situations ([#42](https://github.com/talsec/Free-RASP-ReactNative/issues/42))
+
+# freeRASP 3.6.0
+
+- ⚡ Improved reaction obfuscation
+- 📄 Documentation updates
+
+### Android
+
+- ⚡ Fixed ProviderException which could be occassionally triggered
+- ⚡ Fixed bug causing incompatibility with some versions of React Native ([#38](https://github.com/talsec/Free-RASP-ReactNative/issues/38))
+
+### iOS
+
+- ❗ Raised supported Xcode version to 14.3.1
+- ⚡ Improved SDK obfuscation
+
+# freeRASP 3.5.0
+
+- ⚠️ Updated the `talsecStart()` method to return `Promise<string>`. If freeRASP starts successfuly, the method will return `freeRASP started` string. There are not any changes of the interface if you are using the provided `useFreeRasp` hook.
+- ⚡ Improved the message passing between native iOS/Android and React Native sides
+- ✔️ Restricted message passing to valid callbacks only. If an invalid callback is received, the SDK will kill the app
+
+# freeRASP 3.4.0
+
+- 📄 Documentation updates and improvements
+
+### Android
+
+- ✔️ updated CA bundle for logging pinning
+- ✔️ added error logging of network issues within the logging process
+- ✔️ added retry politics for logging
+- ⚡ fixed issue with DeadObjectException on Android 5 and 6 caused by excessive PackageManager.queryIntentActivities() usage
+- ⚡ improved root detection capabilities
+
+# freeRASP 3.3.1
+
+### iOS
+
+- ⚡ Fixed issue with duplicate headers that caused `Multiple commands produce ...` error ([#11](https://github.com/talsec/Free-RASP-ReactNative/issues/11), [#26](https://github.com/talsec/Free-RASP-ReactNative/issues/26))
+
+# freeRASP 3.3.0
+
+### Android
+
+- ✔️ Removed PolarSSL native library
+- ✔️ Fixed issue with denied USE_BIOMETRICS permission
+
+# freeRASP 3.2.0
+
+### Android
+
+- ✔️ Added support for AGP 8.0
+
+# freeRASP 3.1.0
+
+### Android
+
+- ⚡ Fixed issue with incorrect Keystore type detection on Android 11 and above (https://github.com/talsec/Free-RASP-Flutter/issues/77)
+
+### iOS
+
+- ⚡ Reduced timeout period for logging from 20 sec to 5 sec
+- ⚡ Logging is now async in all calls
+
+# freeRASP 3.0.0
+
+### Android
+
+- ❗ BREAKING CHANGE: Raised minimum supported Android version to 6.0 (API level 23)
+- ✔️ Removed deprecated BouncyCastle dependency that could cause [errors in the build phase](https://github.com/talsec/Free-RASP-ReactNative/issues/13)
+- ✔️ Fixed issue that could cause NullPointerException
+- 🆕 Added new `obfuscationIssues` check, which is triggered when freeRASP doesn't detect any obfuscation of the source code
+
+### iOS
+
+- ⚠️ `passcodeChange` check has been deprecated
+- 🛠️ Refactored the code base
+
+# freeRASP 2.0.3
+
+### iOS
+
+- ✔️ Fixed issue with metadata in iOS framework
+- 📄 Documentation updates and improvements
+
+# freeRASP 2.0.2
+
+- 📄 Documentation updates and improvements
+
+# freeRASP 2.0.1
+
+- 📄 Documentation updates and improvements
+
+# freeRASP 2.0.0
+
+## What's new?
+
+Most of the changes relates to accomodating a new way of choosing between the dev and release version of the SDK. There are also some breaking changes in the API, such as renaming parameters and changing types of callbacks. Android has also removed the HMS dependencies and improved the root detection capabilities.
+
+### JS/TS interface
+
+- ❗ BREAKING API CHANGE: Renamed **'device binding'** to **deviceBinding**
+  - ❗ This allows us to remove apostrophes from other callbacks, too. E.g. **'privilegedAccess'** to **privilegedAccess**
+- ❗ Added **isProd** boolean parameter, which now differentiates between the release (true) and dev (false) version of the SDK. By default set to **true**
+- ❗ **androidConfig** and **iosConfig** are from now on optionals, you can omit a platform if you are not developing for it
+
+### Android
+
+- ❗ Removed the HMS dependencies
+- ❗ Only one version of the SDK is used from now on, instead of two separate for dev and release
+- ❗ The app's build.gradle does not have to be modified now
+- ⚡ Improved root detection accuracy by moving the 'ro.debuggable' property state to an ignored group
+- ⚡ Enhanced root detection capabilities by moving the selinux properties check to device state
+- ⚡ Fine-tuning root evaluation strategy
+
+### iOS
+
+- ❗ Removed one of the xcframeworks
+- ❗ Removed the dependency on the symlinks choosing the proper version (release/dev)
+- ❗️ Removed pre-built script for changing the Debug and Release versions
+
+### Other improvements
+
+- 📄 Documentation updates and improvements
+- ⚡ Updated demo app for new implementation
+
+# freeRASP 1.1.0
+
+We are proud to share with you the first batch of improvements of freeRASP!
+
+## What's new?
+
+Android devices now support device state listeners. What's more, we unified remaining Android and iOS interfaces for more convenient developer's experience.
+
+### Android
+
+- 🆕 Android now has support for device state callbacks:
+  - 📲 **`Secure Hardware Not Available`**: fires when hardware-backed KeyStore is not available
+  - 📲 **`Passcode`**: fires when freeRASP detects that device is not secured with any type of lock
+
+### iOS
+
+- ❗ BREAKING API CHANGE: Renamed `Missing Secure Enclave` to **`Secure Hardware Not Available`** to match the newly added Android callback. The functionality remains unchanged.
+
+### Other improvements
+
+- 📄 Documentation updates and improvements
+
+# freeRASP 1.0.0
+
+- Initial release of freeRASP.

package/README.md

@@ -22,6 +22,7 @@ freeRASP for React Native is a mobile in-app protection and security monitoring
     - [Alternative: Initialize freeRASP in a Class component](#alternative-initialize-freerasp-in-a-class-component)
   - [Step 5: Additional note about obfuscation](#step-5-additional-note-about-obfuscation)
   - [Step 6: User Data Policies](#step-6-user-data-policies)
+- [Using Expo SDK](#using-expo-sdk)
 - [Troubleshooting](#troubleshooting)
 - [Security Report](#security-report)
 - [Talsec Commercial Subscriptions](#money_with_wings-talsec-commercial-subscriptions)
@@ -317,6 +318,39 @@ And you're done 🎉!
 
 If you encounter any other issues, you can see the list of solved issues [here](https://github.com/talsec/Free-RASP-ReactNative/issues?q=is%3Aissue+is%3Aclosed), or open up a [new one](https://github.com/talsec/Free-RASP-ReactNative/issues?q=is%3Aissue+is%3Aopen).
 
+# Using Expo SDK
+freeRASP for React Native is bare React Native plugin. When installing freeRASP into a project that uses Expo SDK, there may be extra configuration needed. We provide plugin config that sets the dependencies automatically. It is recommended to use the plugin config. However, manual setup is also possible.
+
+## Plugin config setup
+Add the plugin config into your `app.json` and specify the `minSdkVersion` (use at least 23):
+```json
+"plugins": [
+      [
+        "freerasp-react-native/app.plugin.js",
+        {
+          "android": {
+            "minSdkVersion": "23"
+          }
+        }
+      ]
+    ],
+```
+
+
+## Manual setup
+### 1. Increase minSdkVersion
+
+This can be done in two ways:
+-  update the `minSdkVersion` property directly in __android/build.gradle__, or
+- use `expo-build-properties` plugin, which updates the property in the prebuild phase. [Read more in the Expo docs](https://docs.expo.dev/versions/latest/sdk/build-properties/).
+
+### 2. Add maven dependency
+- open __android/build.gradle__ _(if you don't see the android folder, run `npx expo prebuild -p android` in terminal to create it)_
+- add following dependency under __allprojects > repositories__:
+`maven { url "https://europe-west3-maven.pkg.dev/talsec-artifact-repository/freerasp" }`
+- if not already configured, add also
+`maven { url 'https://www.jitpack.io' }`
+
 # Troubleshooting
 
 ### Could not determine the dependencies of task `':freerasp-react-native:compileDebugAidl'`

package/android/build.gradle

@@ -72,7 +72,7 @@ repositories {
 
 rootProject.allprojects {
   repositories {
-    maven{url "https://nexus3-public.monetplus.cz/repository/ahead-talsec-free-rasp"}
+    maven{url "https://europe-west3-maven.pkg.dev/talsec-artifact-repository/freerasp"}
     maven{url "https://jitpack.io"}
   }
 }
@@ -86,7 +86,7 @@ dependencies {
   //noinspection GradleDynamicVersion
   implementation "com.facebook.react:react-native:$react_native_version"
   implementation "org.jetbrains.kotlin:kotlin-stdlib:$kotlin_version"
-  implementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:9.0.0"
+  implementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:9.1.0"
 }
 
 if (isNewArchitectureEnabled()) {

package/android/src/main/java/com/freeraspreactnative/FreeraspReactNativeModule.kt

@@ -91,14 +91,22 @@ class FreeraspReactNativeModule(val reactContext: ReactApplicationContext) :
     val certificateHashes = mutableListOf<String>()
     val hashes = androidConfig.getArray("certificateHashes")!!
     for (i in 0 until hashes.size()) {
-      certificateHashes.add(hashes.getString(i))
+      // in RN versions < 0.63, getString is nullable
+      @Suppress("UNNECESSARY_SAFE_CALL")
+      hashes.getString(i)?.let {
+        certificateHashes.add(it)
+      }
     }
     val watcherMail = config.getString("watcherMail")
     val alternativeStores = mutableListOf<String>()
     if (androidConfig.hasKey("supportedAlternativeStores")) {
       val stores = androidConfig.getArray("supportedAlternativeStores")!!
       for (i in 0 until stores.size()) {
-        alternativeStores.add(stores.getString(i))
+        // in RN versions < 0.63, getString is nullable
+        @Suppress("UNNECESSARY_SAFE_CALL")
+        stores.getString(i)?.let {
+          alternativeStores.add(it)
+        }
       }
     }
     var isProd = true

package/app.plugin.js

@@ -0,0 +1 @@
+module.exports = require('./plugin/build');

package/bootstrap.js

@@ -0,0 +1,29 @@
+const os = require('os');
+const path = require('path');
+const child_process = require('child_process');
+
+const root = path.resolve(__dirname, '..');
+const args = process.argv.slice(2);
+const options = {
+  cwd: process.cwd(),
+  env: process.env,
+  stdio: 'inherit',
+  encoding: 'utf-8',
+};
+
+if (os.type() === 'Windows_NT') {
+  options.shell = true;
+}
+
+let result;
+
+if (process.cwd() !== root || args.length) {
+  // We're not in the root of the project, or additional arguments were passed
+  // In this case, forward the command to `yarn`
+  result = child_process.spawnSync('yarn', args, options);
+} else {
+  // If `yarn` is run without arguments, perform bootstrap
+  result = child_process.spawnSync('yarn', ['bootstrap'], options);
+}
+
+process.exitCode = result.status;

package/example/package.json

@@ -16,7 +16,7 @@
   },
   "devDependencies": {
     "@babel/core": "^7.12.9",
-    "@babel/runtime": "^7.12.5",
+    "@babel/runtime": "^7.24.1",
     "babel-plugin-module-resolver": "^4.1.0",
     "metro-react-native-babel-preset": "0.72.3",
     "react-native-svg-transformer": "^1.0.0"

package/ios/TalsecRuntime.xcframework/Info.plist

@@ -6,30 +6,30 @@
 	<array>
 		<dict>
 			<key>LibraryIdentifier</key>
-			<string>ios-arm64</string>
+			<string>ios-arm64_x86_64-simulator</string>
 			<key>LibraryPath</key>
 			<string>TalsecRuntime.framework</string>
 			<key>SupportedArchitectures</key>
 			<array>
 				<string>arm64</string>
+				<string>x86_64</string>
 			</array>
 			<key>SupportedPlatform</key>
 			<string>ios</string>
+			<key>SupportedPlatformVariant</key>
+			<string>simulator</string>
 		</dict>
 		<dict>
 			<key>LibraryIdentifier</key>
-			<string>ios-arm64_x86_64-simulator</string>
+			<string>ios-arm64</string>
 			<key>LibraryPath</key>
 			<string>TalsecRuntime.framework</string>
 			<key>SupportedArchitectures</key>
 			<array>
 				<string>arm64</string>
-				<string>x86_64</string>
 			</array>
 			<key>SupportedPlatform</key>
 			<string>ios</string>
-			<key>SupportedPlatformVariant</key>
-			<string>simulator</string>
 		</dict>
 	</array>
 	<key>CFBundlePackageType</key>