freerasp-react-native 4.2.4 → 4.3.0

package/example/src/App.tsx

@@ -1,6 +1,6 @@
 import * as React from 'react';
 
-import { Platform } from 'react-native';
+import { Platform, PermissionsAndroid } from 'react-native';
 import {
   addToWhitelist,
   useFreeRasp,
@@ -18,10 +18,14 @@ const App = () => {
   const [suspiciousApps, setSuspiciousApps] = React.useState<
     SuspiciousAppInfo[]
   >([]);
+  const [allChecksStatus, setAllChecksStatus] = React.useState<
+    'in progress' | 'completed'
+  >('in progress');
 
   useEffect(() => {
     (async () => {
       Platform.OS === 'android' && (await addItemsToMalwareWhitelist());
+      await requestLocationPermission();
     })();
   }, []);
 
@@ -50,6 +54,7 @@ const App = () => {
     },
     watcherMail: 'your_email_address@example.com',
     isProd: true,
+    killOnBypass: true,
   };
 
   const actions = {
@@ -216,6 +221,69 @@ const App = () => {
         )
       );
     },
+    // Android only
+    timeSpoofing: () => {
+      setAppChecks((currentState) =>
+        currentState.map((threat) =>
+          threat.name === 'Time Spoofing'
+            ? { ...threat, status: 'nok' }
+            : threat
+        )
+      );
+    },
+    // Android only
+    locationSpoofing: () => {
+      setAppChecks((currentState) =>
+        currentState.map((threat) =>
+          threat.name === 'Location Spoofing'
+            ? { ...threat, status: 'nok' }
+            : threat
+        )
+      );
+    },
+    // Android only
+    unsecureWifi: () => {
+      setAppChecks((currentState) =>
+        currentState.map((threat) =>
+          threat.name === 'Unsecure Wifi'
+            ? { ...threat, status: 'nok' }
+            : threat
+        )
+      );
+    },
+  };
+
+  const raspExecutionStateActions = {
+    // Android & iOS
+    allChecksFinished: () => {
+      setAllChecksStatus('completed');
+    },
+  };
+
+  const requestLocationPermission = async () => {
+    if (Platform.OS !== 'android') {
+      return;
+    }
+    try {
+      const results = await PermissionsAndroid.requestMultiple([
+        PermissionsAndroid.PERMISSIONS.ACCESS_FINE_LOCATION,
+        PermissionsAndroid.PERMISSIONS.ACCESS_COARSE_LOCATION,
+      ]);
+
+      const fineGranted =
+        results[PermissionsAndroid.PERMISSIONS.ACCESS_FINE_LOCATION] ===
+        PermissionsAndroid.RESULTS.GRANTED;
+      const coarseGranted =
+        results[PermissionsAndroid.PERMISSIONS.ACCESS_COARSE_LOCATION] ===
+        PermissionsAndroid.RESULTS.GRANTED;
+
+      console.info('Location permissions:', {
+        fineGranted,
+        coarseGranted,
+      });
+    } catch (err) {
+      console.warn('Location permission request error:', err);
+    }
   };
 
   const addItemsToMalwareWhitelist = async () => {
@@ -237,9 +305,15 @@ const App = () => {
     );
   };
 
-  useFreeRasp(config, actions);
+  useFreeRasp(config, actions, raspExecutionStateActions);
 
-  return <DemoApp checks={appChecks} suspiciousApps={suspiciousApps} />;
+  return (
+    <DemoApp
+      checks={appChecks}
+      suspiciousApps={suspiciousApps}
+      allChecksFinishedStatus={allChecksStatus}
+    />
+  );
 };
 
 export default App;

package/example/src/DemoApp.tsx

@@ -12,6 +12,7 @@ import {
   TextInput,
   View,
   Modal,
+  ActivityIndicator,
 } from 'react-native';
 import { Colors } from './styles';
 import { MalwareModal } from './MalwareModal';
@@ -33,7 +34,8 @@ export const DemoApp: React.FC<{
     status: string;
   }[];
   suspiciousApps: SuspiciousAppInfo[];
-}> = ({ checks, suspiciousApps }) => {
+  allChecksFinishedStatus: 'in progress' | 'completed';
+}> = ({ checks, suspiciousApps, allChecksFinishedStatus }) => {
   const [hasScreenCaptureBlocked, setHasScreenCaptureBlocked] =
     React.useState(false);
   const [externalIdValue, setExternalIdValue] = React.useState('');
@@ -148,6 +150,45 @@ export const DemoApp: React.FC<{
                   </View>
                 </Modal>
               </HStack>
+              <Text style={styles.titleText}>RASP Execution State:</Text>
+              <Box
+                style={[
+                  styles.box,
+                  allChecksFinishedStatus === 'completed'
+                    ? styles.boxCheckOk
+                    : styles.boxProgress,
+                ]}>
+                <HStack
+                  style={{
+                    justifyContent: 'space-between',
+                    alignItems: 'center',
+                  }}>
+                  <Text
+                    style={{
+                      color:
+                        allChecksFinishedStatus === 'completed'
+                          ? 'green'
+                          : Colors.progressDark,
+                      fontWeight: 'bold',
+                      alignSelf: 'center',
+                    }}>
+                    All Checks Finished
+                  </Text>
+                  {allChecksFinishedStatus === 'completed' ? (
+                    <Image
+                      source={CheckmarkCircle}
+                      style={[
+                        styles.checkIcon,
+                        {
+                          tintColor: Colors.checkOkDark,
+                        },
+                      ]}
+                    />
+                  ) : (
+                    <ActivityIndicator size={30} color={Colors.progressDark} />
+                  )}
+                </HStack>
+              </Box>
               <Text style={styles.titleText}>freeRASP checks:</Text>
               {checks.map((check: any, idx: number) => (
                 <Box
@@ -245,6 +286,10 @@ const styles = StyleSheet.create({
     borderColor: Colors.checkOkDark,
     backgroundColor: Colors.checkOkLight,
   },
+  boxProgress: {
+    borderColor: Colors.progressDark,
+    backgroundColor: Colors.progressLight,
+  },
   box: {
     borderWidth: 1,
     paddingHorizontal: 30,

package/example/src/MalwareItem.tsx

@@ -92,6 +92,10 @@ export const MalwareItem: React.FC<{ app: SuspiciousAppInfo }> = ({ app }) => {
           </Text>
           <Text style={styles.listItemTitle}>Detection reason:</Text>
           <Text style={styles.listItem}>{app.reason}</Text>
+          <Text style={styles.listItemTitle}>Granted permissions:</Text>
+          <Text style={styles.listItem}>
+            {app.permissions?.join(', ') ?? 'Not specified'}
+          </Text>
           <HStack style={styles.buttonGroup}>
             <Button
               title={'Add to whitelist'}

package/example/src/checks.ts

@@ -21,4 +21,7 @@ export const androidChecks = [
   { name: 'Malware', status: 'ok' },
   { name: 'ADB Enabled', status: 'ok' },
   { name: 'Multi Instance', status: 'ok' },
+  { name: 'Time Spoofing', status: 'ok' },
+  { name: 'Location Spoofing', status: 'ok' },
+  { name: 'Unsecure Wifi', status: 'ok' },
 ];

package/example/src/styles.ts

@@ -5,4 +5,6 @@ export const Colors = {
   checkOkDark: 'green',
   checkNokDark: 'rgb(200, 0, 0)',
   grey: 'rgb(120, 120, 120)',
+  progressLight: 'rgba(173, 216, 230, 1)', // light blue
+  progressDark: 'rgb(30, 144, 255)', // dodger blue
 };

package/freerasp-react-native.podspec

@@ -14,7 +14,7 @@ Pod::Spec.new do |s|
   s.platforms    = { :ios => "11.0" }
   s.source       = { :git => "https://github.com/talsec/freerasp-react-native.git", :tag => "#{s.version}" }
 
-  s.source_files = 'ios/*.{h,m,mm,swift}', 'ios/TalsecRuntime.xcframework'
+  s.source_files = 'ios/**/*.{h,m,mm,swift}', 'ios/TalsecRuntime.xcframework'
   s.xcconfig = { 'OTHER_LDFLAGS' => '-framework TalsecRuntime' }
   s.ios.vendored_frameworks = "ios/TalsecRuntime.xcframework"
   

package/ios/FreeraspReactNative.m

@@ -11,6 +11,10 @@ RCT_EXTERN_METHOD(getThreatChannelData:(RCTPromiseResolveBlock)resolve
                   withRejecter:(RCTPromiseRejectBlock)reject)
 RCT_EXTERN_METHOD(getThreatIdentifiers:(RCTPromiseResolveBlock)resolve
                   withRejecter:(RCTPromiseRejectBlock)reject)
+RCT_EXTERN_METHOD(getRaspExecutionStateChannelData:(RCTPromiseResolveBlock)resolve
+                  withRejecter:(RCTPromiseRejectBlock)reject)
+RCT_EXTERN_METHOD(getRaspExecutionStateIdentifiers:(RCTPromiseResolveBlock)resolve
+                  withRejecter:(RCTPromiseRejectBlock)reject)
 RCT_EXTERN_METHOD(blockScreenCapture:(BOOL)enable
                   withResolver:(RCTPromiseResolveBlock)resolve
                   withRejecter:(RCTPromiseRejectBlock)reject)

package/ios/FreeraspReactNative.swift

@@ -6,9 +6,6 @@ class FreeraspReactNative: RCTEventEmitter {
 
     public static var shared:FreeraspReactNative?
 
-    let threatChannelKey = String(Int.random(in: 100_000..<999_999_999)) // key of the argument map under which threats are expected
-    let threatChannelName = String(Int.random(in: 100_000..<999_999_999)) // name of the channel over which threat callbacks are sent
-
     override init() {
         super.init()
         FreeraspReactNative.shared = self
@@ -74,33 +71,33 @@ class FreeraspReactNative: RCTEventEmitter {
         UserDefaults.standard.set(externalId, forKey: "app.talsec.externalid")
         resolve("OK - Store external ID")
     }
-    
-    private func getProtectedWindow(completion: @escaping (UIWindow?) -> Void) {
-        DispatchQueue.main.async {
-            if #available(iOS 13.0, *) {
-                if let windowScene = UIApplication.shared.connectedScenes.first as? UIWindowScene {
-                    if let window = windowScene.windows.first {
-                        completion(window)
-                    } else {
-                        completion(nil)
-                    }
-                } else {
-                    completion(nil)
-                }
-            }
-        }
-    }
 
     /**
      * Method to setup the message passing between native and React Native
      */
     @objc(getThreatChannelData:withRejecter:)
     private func getThreatChannelData(resolve: RCTPromiseResolveBlock, rejecter reject: RCTPromiseRejectBlock) -> Void {
-        resolve([threatChannelName, threatChannelKey])
+        resolve([EventIdentifiers.threatChannelName, EventIdentifiers.threatChannelKey])
+    }
+  
+    /**
+     * Method to setup the message passing between native and React Native
+     */
+    @objc(getRaspExecutionStateChannelData:withRejecter:)
+    private func getRaspExecutionStateChannelData(resolve: RCTPromiseResolveBlock, rejecter reject: RCTPromiseRejectBlock) -> Void {
+      resolve([EventIdentifiers.raspExecutionStateChannelName, EventIdentifiers.raspExecutionStateChannelKey])
     }
 
     func dispatchEvent(securityThreat: SecurityThreat) -> Void {
-        FreeraspReactNative.shared!.sendEvent(withName: threatChannelName, body: [threatChannelKey: securityThreat.callbackIdentifier])
+        FreeraspReactNative.shared!.sendEvent(withName: EventIdentifiers.threatChannelName, body: [
+          EventIdentifiers.threatChannelKey: securityThreat.callbackIdentifier,
+        ])
+    }
+  
+    func dispatchRaspExecutionStateEvent(event: RaspExecutionStates) -> Void {
+      FreeraspReactNative.shared!.sendEvent(withName: EventIdentifiers.raspExecutionStateChannelName, body: [
+        EventIdentifiers.raspExecutionStateChannelKey: event.callbackIdentifier,
+      ])
     }
 
     /**
@@ -108,7 +105,15 @@ class FreeraspReactNative: RCTEventEmitter {
      */
     @objc(getThreatIdentifiers:withRejecter:)
     private func getThreatIdentifiers(resolve: RCTPromiseResolveBlock, rejecter reject: RCTPromiseRejectBlock) -> Void {
-        resolve(getThreatIdentifiers())
+      resolve(freerasp_react_native.getThreatIdentifiers())
+    }
+  
+    /**
+     * Method to get the random identifiers of callbacks
+     */
+    @objc(getRaspExecutionStateIdentifiers:withRejecter:)
+    private func getRaspExecutionStateIdentifiers(resolve: RCTPromiseResolveBlock, rejecter reject: RCTPromiseRejectBlock) -> Void {
+      resolve(freerasp_react_native.getRaspExecutionStateIdentifiers())
     }
 
     /**
@@ -120,65 +125,15 @@ class FreeraspReactNative: RCTEventEmitter {
         abort()
     }
 
-    private func getThreatIdentifiers() -> [Int] {
-        return SecurityThreat.allCases
-            .filter {
-                threat in threat.rawValue != "passcodeChange"
-            }
-            .map {
-                threat in threat.callbackIdentifier
-            }
-    }
-
     override func supportedEvents() -> [String]! {
-        return [threatChannelName]
+      return [EventIdentifiers.threatChannelName, EventIdentifiers.raspExecutionStateChannelName]
     }
 }
 
-struct ThreatIdentifiers {
-    static let threatIdentifierList: [Int] = (1...14).map { _ in Int.random(in: 100_000..<999_999_999) }
-}
 
-/// An extension to unify callback names with RN ones.
-extension SecurityThreat {
-
-    var callbackIdentifier: Int {
-        switch self {
-            case .signature:
-                return ThreatIdentifiers.threatIdentifierList[0]
-            case .jailbreak:
-                return ThreatIdentifiers.threatIdentifierList[1]
-            case .debugger:
-                return ThreatIdentifiers.threatIdentifierList[2]
-            case .runtimeManipulation:
-                return ThreatIdentifiers.threatIdentifierList[3]
-            case .passcode:
-                return ThreatIdentifiers.threatIdentifierList[4]
-            case .passcodeChange:
-                return ThreatIdentifiers.threatIdentifierList[5]
-            case .simulator:
-                return ThreatIdentifiers.threatIdentifierList[6]
-            case .missingSecureEnclave:
-                return ThreatIdentifiers.threatIdentifierList[7]
-            case .systemVPN:
-                return ThreatIdentifiers.threatIdentifierList[8]
-            case .deviceChange:
-                return ThreatIdentifiers.threatIdentifierList[9]
-            case .deviceID:
-                return ThreatIdentifiers.threatIdentifierList[10]
-            case .unofficialStore:
-                return ThreatIdentifiers.threatIdentifierList[11]
-            case .screenshot:
-                return ThreatIdentifiers.threatIdentifierList[12]
-            case .screenRecording:
-                return ThreatIdentifiers.threatIdentifierList[13]
-            @unknown default:
-                abort()
-        }
-    }
-}
 
-extension SecurityThreatCenter: SecurityThreatHandler {
+
+extension SecurityThreatCenter: @retroactive SecurityThreatHandler, @retroactive RaspExecutionState {
 
     public func threatDetected(_ securityThreat: TalsecRuntime.SecurityThreat) {
         if (securityThreat.rawValue == "passcodeChange") {
@@ -186,4 +141,11 @@ extension SecurityThreatCenter: SecurityThreatHandler {
         }
         FreeraspReactNative.shared!.dispatchEvent(securityThreat: securityThreat)
     }
+  
+    public func onAllChecksFinished() {
+      
+      FreeraspReactNative.shared!.dispatchRaspExecutionStateEvent(event: RaspExecutionStates.allChecksFinished)
+    }
 }
+
+

package/ios/TalsecRuntime.xcframework/Info.plist

@@ -8,32 +8,32 @@
 			<key>BinaryPath</key>
 			<string>TalsecRuntime.framework/TalsecRuntime</string>
 			<key>LibraryIdentifier</key>
-			<string>ios-arm64</string>
+			<string>ios-arm64_x86_64-simulator</string>
 			<key>LibraryPath</key>
 			<string>TalsecRuntime.framework</string>
 			<key>SupportedArchitectures</key>
 			<array>
 				<string>arm64</string>
+				<string>x86_64</string>
 			</array>
 			<key>SupportedPlatform</key>
 			<string>ios</string>
+			<key>SupportedPlatformVariant</key>
+			<string>simulator</string>
 		</dict>
 		<dict>
 			<key>BinaryPath</key>
 			<string>TalsecRuntime.framework/TalsecRuntime</string>
 			<key>LibraryIdentifier</key>
-			<string>ios-arm64_x86_64-simulator</string>
+			<string>ios-arm64</string>
 			<key>LibraryPath</key>
 			<string>TalsecRuntime.framework</string>
 			<key>SupportedArchitectures</key>
 			<array>
 				<string>arm64</string>
-				<string>x86_64</string>
 			</array>
 			<key>SupportedPlatform</key>
 			<string>ios</string>
-			<key>SupportedPlatformVariant</key>
-			<string>simulator</string>
 		</dict>
 	</array>
 	<key>CFBundlePackageType</key>