freerasp-react-native 3.7.0 → 3.7.2

package/CHANGELOG.md

@@ -1,3 +1,14 @@
+# freeRASP 3.7.2
+
+- ⚡ Update expo config plugin to fix release build issue in RN 0.73
+
+# freeRASP 3.7.1
+
+### Android
+
+- ⚡ Updated freeRASP SDK artifact hosting ensuring better stability and availibility
+- ⚡ Fixed compatibility issues with RN < 0.63
+
 # freeRASP 3.7.0
 
 - ⚡ Added support for apps built with Expo SDK

package/README.md

@@ -1,6 +1,8 @@
 ![FreeRasp](https://raw.githubusercontent.com/talsec/Free-RASP-Community/master/visuals/freeRASPforRN.png)
 
-![GitHub Repo stars](https://img.shields.io/github/stars/talsec/Free-RASP-Community?color=green) ![GitHub](https://img.shields.io/github/license/talsec/Free-RASP-Community) ![GitHub](https://img.shields.io/github/last-commit/talsec/Free-RASP-Community) ![Publisher](https://img.shields.io/pub/publisher/freerasp) [![42matters](https://42matters.com/badges/sdk-installations/freerasp)](https://42matters.com/sdks/android/freerasp)
+![GitHub Repo stars](https://img.shields.io/github/stars/talsec/Free-RASP-Community?color=green) ![GitHub](https://img.shields.io/github/license/talsec/Free-RASP-Community) ![GitHub](https://img.shields.io/github/last-commit/talsec/Free-RASP-Community) ![Publisher](https://img.shields.io/pub/publisher/freerasp) [![42matters](https://42matters.com/badges/sdk-installations/talsec)](https://42matters.com/sdks/android/talsec)
+
+[<img src="https://assets.42matters.com/badges/2024/04/rising-star.svg?m=04" width="100"/>](https://42matters.com/sdks/android/talsec)
 
 # freeRASP for React Native
 
@@ -322,14 +324,16 @@ If you encounter any other issues, you can see the list of solved issues [here](
 freeRASP for React Native is bare React Native plugin. When installing freeRASP into a project that uses Expo SDK, there may be extra configuration needed. We provide plugin config that sets the dependencies automatically. It is recommended to use the plugin config. However, manual setup is also possible.
 
 ## Plugin config setup
-Add the plugin config into your `app.json` and specify the `minSdkVersion` (use at least 23):
+Add the plugin config into your `app.json` and specify the `minSdkVersion` (use at least 23).
+Additionally, if you are using Expo 50, increase version of R8 above 8.2 with the `R8Version` property [(to support sealed classes on Android)](https://github.com/talsec/Free-RASP-ReactNative/issues/60).
 ```json
 "plugins": [
       [
         "freerasp-react-native/app.plugin.js",
         {
           "android": {
-            "minSdkVersion": "23"
+            "minSdkVersion": "23",
+            "R8Version": "8.3.37" // optional for Expo 50
           }
         }
       ]
@@ -347,7 +351,7 @@ This can be done in two ways:
 ### 2. Add maven dependency
 - open __android/build.gradle__ _(if you don't see the android folder, run `npx expo prebuild -p android` in terminal to create it)_
 - add following dependency under __allprojects > repositories__:
-`maven { url "https://nexus3-public.monetplus.cz/repository/ahead-talsec-free-rasp" }`
+`maven { url "https://europe-west3-maven.pkg.dev/talsec-artifact-repository/freerasp" }`
 - if not already configured, add also
 `maven { url 'https://www.jitpack.io' }`
 
@@ -403,6 +407,15 @@ Go to `<your_project>/node_modules/freerasp-react-native/ios/TalsecRuntime.xcfra
 #define TALSECRUNTIME_SWIFT_H
 ```
 
+### Execution failed for task ':freerasp-react-native:minifyReleaseWithR8'.
+`Sealed classes are not supported as program classes when generating class files.`
+
+**Reason:**
+Kotlin sealed classes are not supported in AGP 8.1 used by some versions of RN (currently 0.73.x)
+
+**Solution:**
+Follow [this comment on Google Issue Tracker](https://issuetracker.google.com/issues/227160052#comment37), which contains also additional information about the issue.
+
 # Security Report
 
 The Security Report is a weekly summary describing the application's security state and characteristics of the devices it runs on in a practical and easy-to-understand way.

package/android/build.gradle

@@ -72,7 +72,7 @@ repositories {
 
 rootProject.allprojects {
   repositories {
-    maven{url "https://nexus3-public.monetplus.cz/repository/ahead-talsec-free-rasp"}
+    maven{url "https://europe-west3-maven.pkg.dev/talsec-artifact-repository/freerasp"}
     maven{url "https://jitpack.io"}
   }
 }
@@ -86,7 +86,7 @@ dependencies {
   //noinspection GradleDynamicVersion
   implementation "com.facebook.react:react-native:$react_native_version"
   implementation "org.jetbrains.kotlin:kotlin-stdlib:$kotlin_version"
-  implementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:9.0.2"
+  implementation "com.aheaditec.talsec.security:TalsecSecurity-Community-ReactNative:9.1.0"
 }
 
 if (isNewArchitectureEnabled()) {

package/android/src/main/java/com/freeraspreactnative/FreeraspReactNativeModule.kt

@@ -91,14 +91,22 @@ class FreeraspReactNativeModule(val reactContext: ReactApplicationContext) :
     val certificateHashes = mutableListOf<String>()
     val hashes = androidConfig.getArray("certificateHashes")!!
     for (i in 0 until hashes.size()) {
-      certificateHashes.add(hashes.getString(i))
+      // in RN versions < 0.63, getString is nullable
+      @Suppress("UNNECESSARY_SAFE_CALL")
+      hashes.getString(i)?.let {
+        certificateHashes.add(it)
+      }
     }
     val watcherMail = config.getString("watcherMail")
     val alternativeStores = mutableListOf<String>()
     if (androidConfig.hasKey("supportedAlternativeStores")) {
       val stores = androidConfig.getArray("supportedAlternativeStores")!!
       for (i in 0 until stores.size()) {
-        alternativeStores.add(stores.getString(i))
+        // in RN versions < 0.63, getString is nullable
+        @Suppress("UNNECESSARY_SAFE_CALL")
+        stores.getString(i)?.let {
+          alternativeStores.add(it)
+        }
       }
     }
     var isProd = true

package/lib/typescript/plugin/src/index.d.ts

@@ -1,11 +1,5 @@
 import { ConfigPlugin } from '@expo/config-plugins';
-import { PluginConfigType } from './pluginConfig';
-export declare const setBuildscriptDependency: (buildGradle: string) => string;
-/**
- * Update `<project>/build.gradle` by adding nexus dependency to buildscript
- */
-export declare const withBuildscriptDependency: ConfigPlugin;
-export declare const withAndroidMinSdkVersion: ConfigPlugin<PluginConfigType>;
+import { type PluginConfigType } from './pluginConfig';
 declare const _default: ConfigPlugin<PluginConfigType>;
 export default _default;
 //# sourceMappingURL=index.d.ts.map

package/lib/typescript/plugin/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../plugin/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,YAAY,EAIb,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAQlD,eAAO,MAAM,wBAAwB,gBAAiB,MAAM,WAsB3D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,yBAAyB,EAAE,YAcvC,CAAC;AAEF,eAAO,MAAM,wBAAwB,gCASlC,CAAC;;AAgBJ,wBAA2E"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../plugin/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,YAAY,EAIb,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;;AAmHvD,wBAA2E"}

package/lib/typescript/plugin/src/pluginConfig.d.ts

@@ -17,5 +17,6 @@ export interface PluginConfigTypeAndroid {
      * Override the default `minSdkVersion` version number in **build.gradle**.
      * */
     minSdkVersion?: number;
+    R8Version?: string;
 }
 //# sourceMappingURL=pluginConfig.d.ts.map

package/lib/typescript/plugin/src/pluginConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pluginConfig.d.ts","sourceRoot":"","sources":["../../../../plugin/src/pluginConfig.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,OAAO,CAAC,EAAE,uBAAuB,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC;;SAEK;IACL,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB"}
+{"version":3,"file":"pluginConfig.d.ts","sourceRoot":"","sources":["../../../../plugin/src/pluginConfig.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,OAAO,CAAC,EAAE,uBAAuB,CAAC;CACnC;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC;;SAEK;IACL,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB"}

package/lib/typescript/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.tsx"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,yBAAyB,EAC9B,YAAY,EACb,MAAM,eAAe,CAAC;AAGvB,QAAA,MAAQ,mBAAmB,KAAkB,CAAC;AAqC9C,eAAO,MAAM,kBAAkB,mIAiD9B,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAO,IAExC,CAAC;AAEF,eAAO,MAAM,WAAW,YAAmB,YAAY,KAAG,QAAQ,MAAM,CAEvE,CAAC;AAEF,eAAO,MAAM,WAAW,gDACd,YAAY,qFAkBrB,CAAC;AAEF,eAAe,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/index.tsx"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,yBAAyB,EAC9B,YAAY,EACb,MAAM,eAAe,CAAC;AAGvB,QAAA,MAAQ,mBAAmB,KAAkB,CAAC;AAqC9C,eAAO,MAAM,kBAAkB,gDACrB,CAAC,GAAG,OAAO,QAAQ,MAAM,CAAC,EAAE,MAAM,yBAAyB,CAAC,EAAE,EAAE,CAAC,kBAgD1E,CAAC;AAEF,eAAO,MAAM,qBAAqB,QAAO,IAExC,CAAC;AAEF,eAAO,MAAM,WAAW,YAAmB,YAAY,KAAG,QAAQ,MAAM,CAEvE,CAAC;AAEF,eAAO,MAAM,WAAW,gDACd,YAAY,WACX,CAAC,GAAG,OAAO,QAAQ,MAAM,CAAC,EAAE,MAAM,yBAAyB,CAAC,EAAE,EAAE,CAAC,SAiB3E,CAAC;AAEF,eAAe,mBAAmB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "freerasp-react-native",
-  "version": "3.7.0",
+  "version": "3.7.2",
   "description": "React Native plugin for improving app security and threat monitoring on Android and iOS mobile devices.",
   "main": "lib/commonjs/index",
   "module": "lib/module/index",
@@ -10,13 +10,11 @@
   "scripts": {
     "typecheck": "tsc --noEmit",
     "lint": "eslint \"**/*.{js,ts,tsx}\"",
-    "prepack": "bob build",
     "release": "release-it",
     "example": "yarn --cwd example",
     "bootstrap": "yarn example && yarn install && yarn example pods",
     "clean": "del-cli android/build example/android/build example/android/app/build example/ios/build",
     "build:plugin": "tsc --build plugin"
-
   },
   "keywords": [
     "react-native",
@@ -80,7 +78,6 @@
   "engines": {
     "node": ">= 16.0.0"
   },
-  "packageManager": "^yarn@1.22.15",
   "jest": {
     "preset": "react-native",
     "modulePathIgnorePatterns": [

package/plugin/build/index.d.ts

@@ -1,10 +1,4 @@
 import { ConfigPlugin } from '@expo/config-plugins';
-import { PluginConfigType } from './pluginConfig';
-export declare const setBuildscriptDependency: (buildGradle: string) => string;
-/**
- * Update `<project>/build.gradle` by adding nexus dependency to buildscript
- */
-export declare const withBuildscriptDependency: ConfigPlugin;
-export declare const withAndroidMinSdkVersion: ConfigPlugin<PluginConfigType>;
+import { type PluginConfigType } from './pluginConfig';
 declare const _default: ConfigPlugin<PluginConfigType>;
 export default _default;

package/plugin/build/index.js

@@ -1,16 +1,15 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.withAndroidMinSdkVersion = exports.withBuildscriptDependency = exports.setBuildscriptDependency = void 0;
 const config_plugins_1 = require("@expo/config-plugins");
 const { createBuildGradlePropsConfigPlugin } = config_plugins_1.AndroidConfig.BuildProperties;
-const urlNexus = 'https://nexus3-public.monetplus.cz/repository/ahead-talsec-free-rasp';
+const urlFreerasp = 'https://europe-west3-maven.pkg.dev/talsec-artifact-repository/freerasp';
 const urlJitpack = 'https://www.jitpack.io';
 const setBuildscriptDependency = (buildGradle) => {
     // This enables users in bare workflow to comment out the line to prevent freerasp from adding it back.
-    const mavenNexus = buildGradle.includes(urlNexus)
+    const mavenFreerasp = buildGradle.includes(urlFreerasp)
         ? ''
-        : `maven { url "${urlNexus}" }`;
-    const mavenJitpack = buildGradle.includes(urlNexus)
+        : `maven { url "${urlFreerasp}" }`;
+    const mavenJitpack = buildGradle.includes(urlJitpack)
         ? ''
         : `maven { url "${urlJitpack}" }`;
     // It's ok to have multiple allprojects.repositories, so we create a new one since it's cheaper than tokenizing
@@ -18,21 +17,30 @@ const setBuildscriptDependency = (buildGradle) => {
     const combinedGradleMaven = `
     allprojects {
       repositories {
-        ${mavenNexus}
+        ${mavenFreerasp}
         ${mavenJitpack}
       }
     }
   `;
     return buildGradle + `\n${combinedGradleMaven}\n`;
 };
-exports.setBuildscriptDependency = setBuildscriptDependency;
+const setAndroidR8 = (buildGradle, version) => {
+    const combinedGradleMaven = `
+    buildscript {
+      dependencies {
+          classpath("com.android.tools:r8:${version}")
+      }
+    }
+  `;
+    return buildGradle + `\n${combinedGradleMaven}\n`;
+};
 /**
  * Update `<project>/build.gradle` by adding nexus dependency to buildscript
  */
-const withBuildscriptDependency = (config) => {
-    return (0, config_plugins_1.withProjectBuildGradle)(config, (config) => {
+const withBuildscriptDependency = (expoConfig) => {
+    return (0, config_plugins_1.withProjectBuildGradle)(expoConfig, (config) => {
         if (config.modResults.language === 'groovy') {
-            config.modResults.contents = (0, exports.setBuildscriptDependency)(config.modResults.contents);
+            config.modResults.contents = setBuildscriptDependency(config.modResults.contents);
         }
         else {
             config_plugins_1.WarningAggregator.addWarningAndroid('freerasp-react-native', `Cannot automatically configure project build.gradle, because it's not groovy`);
@@ -40,16 +48,33 @@ const withBuildscriptDependency = (config) => {
         return config;
     });
 };
-exports.withBuildscriptDependency = withBuildscriptDependency;
-exports.withAndroidMinSdkVersion = createBuildGradlePropsConfigPlugin([
+const withAndroidMinSdkVersion = createBuildGradlePropsConfigPlugin([
     {
         propName: 'android.minSdkVersion',
         propValueGetter: (config) => config.android?.minSdkVersion?.toString(),
     },
 ], 'withAndroidMinSdkVersion');
+/**
+ * Update `<project>/build.gradle` by updating the R8 version
+ */
+const withAndroidR8Version = (expoConfig, props) => {
+    if (!props.android?.R8Version) {
+        return expoConfig;
+    }
+    return (0, config_plugins_1.withProjectBuildGradle)(expoConfig, (config) => {
+        if (config.modResults.language === 'groovy') {
+            config.modResults.contents = setAndroidR8(config.modResults.contents, props.android?.R8Version ?? '+');
+        }
+        else {
+            config_plugins_1.WarningAggregator.addWarningAndroid('freerasp-react-native', `Cannot automatically configure project build.gradle, because it's not groovy`);
+        }
+        return config;
+    });
+};
 const withRnTalsecApp = (config, props) => {
-    config = (0, exports.withBuildscriptDependency)(config);
-    config = (0, exports.withAndroidMinSdkVersion)(config, props);
+    config = withBuildscriptDependency(config);
+    config = withAndroidMinSdkVersion(config, props);
+    config = withAndroidR8Version(config, props);
     return config;
 };
 let pkg = {

package/plugin/build/pluginConfig.d.ts

@@ -17,4 +17,5 @@ export interface PluginConfigTypeAndroid {
      * Override the default `minSdkVersion` version number in **build.gradle**.
      * */
     minSdkVersion?: number;
+    R8Version?: string;
 }