react-native-app-attestation 0.1.0

package/lib/AttestationService.js

@@ -0,0 +1,126 @@
+"use strict";
+// src/AttestationService.ts
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AttestationService = void 0;
+const react_native_1 = require("react-native");
+class AttestationService {
+    constructor(config) {
+        var _a;
+        this.cachedToken = null;
+        this.tokenExpiry = null;
+        this.config = config;
+        this.cacheDuration = (_a = config.tokenCacheDurationMs) !== null && _a !== void 0 ? _a : 10 * 60 * 1000;
+    }
+    log(msg) {
+        if (this.config.debug)
+            console.log(`[Attestation] ${msg}`);
+    }
+    // Backend se nonce fetch karo
+    fetchNonce() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const response = yield fetch(this.config.nonceEndpoint);
+            const data = yield response.json();
+            if (!data.nonce)
+                throw new Error('Nonce nahi mila backend se');
+            return data.nonce;
+        });
+    }
+    // Android — Play Integrity
+    getAndroidToken() {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const { PlayIntegrityModule } = react_native_1.NativeModules;
+                if (!PlayIntegrityModule) {
+                    this.log('PlayIntegrityModule nahi mila');
+                    return null;
+                }
+                const nonce = yield this.fetchNonce();
+                const token = yield PlayIntegrityModule
+                    .getAttestationToken(nonce);
+                this.log('Android token mila!');
+                return token;
+            }
+            catch (error) {
+                this.log(`Android error: ${error}`);
+                return null;
+            }
+        });
+    }
+    // iOS — App Attest
+    getIOSToken() {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                const { AppAttestModule } = react_native_1.NativeModules;
+                if (!AppAttestModule) {
+                    this.log('AppAttestModule nahi mila');
+                    return null;
+                }
+                const challenge = yield this.fetchNonce();
+                const token = yield AppAttestModule
+                    .getAttestationToken(challenge);
+                this.log('iOS token mila!');
+                return token;
+            }
+            catch (error) {
+                this.log(`iOS error: ${error}`);
+                return null;
+            }
+        });
+    }
+    // Main function
+    getToken() {
+        return __awaiter(this, arguments, void 0, function* (forceRefresh = false) {
+            const now = Date.now();
+            const platform = react_native_1.Platform.OS;
+            // Cache valid hai?
+            if (!forceRefresh &&
+                this.cachedToken &&
+                this.tokenExpiry &&
+                now < this.tokenExpiry) {
+                this.log('Cached token use ho raha hai');
+                return {
+                    token: this.cachedToken,
+                    fromCache: true,
+                    platform,
+                };
+            }
+            // Fresh token lo
+            let token = null;
+            if (react_native_1.Platform.OS === 'android') {
+                token = yield this.getAndroidToken();
+            }
+            else if (react_native_1.Platform.OS === 'ios') {
+                token = yield this.getIOSToken();
+            }
+            // Cache karo
+            if (token) {
+                this.cachedToken = token;
+                this.tokenExpiry = now + this.cacheDuration;
+                this.log(`Token cached — ${this.cacheDuration / 60000} min valid`);
+            }
+            return { token, fromCache: false, platform };
+        });
+    }
+    // Sensitive operations ke liye
+    getFreshToken() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.getToken(true);
+        });
+    }
+    // Logout pe call karo
+    clearCache() {
+        this.cachedToken = null;
+        this.tokenExpiry = null;
+        this.log('Cache cleared');
+    }
+}
+exports.AttestationService = AttestationService;

package/lib/DeviceIDService.d.ts

@@ -0,0 +1,9 @@
+import { StorageAdapter } from './types';
+export declare class DeviceIDService {
+    private storage;
+    private debug;
+    constructor(storage: StorageAdapter, debug?: boolean);
+    private log;
+    getDeviceID(): Promise<string>;
+    resetDeviceID(): Promise<void>;
+}

package/lib/DeviceIDService.js

@@ -0,0 +1,62 @@
+"use strict";
+// src/DeviceIDService.ts
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeviceIDService = void 0;
+const DEVICE_ID_KEY = 'rn_attestation_device_id';
+// Khud ka UUID generator — koi library nahi!
+const generateUUID = () => {
+    return 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, (c) => {
+        const r = (Math.random() * 16) | 0;
+        const v = c === 'x' ? r : (r & 0x3) | 0x8;
+        return v.toString(16);
+    });
+};
+class DeviceIDService {
+    constructor(storage, debug = false) {
+        this.storage = storage;
+        this.debug = debug;
+    }
+    log(msg) {
+        if (this.debug)
+            console.log(`[DeviceID] ${msg}`);
+    }
+    getDeviceID() {
+        return __awaiter(this, void 0, void 0, function* () {
+            try {
+                // Storage se check karo
+                let deviceId = yield Promise.resolve(this.storage.get(DEVICE_ID_KEY));
+                if (!deviceId) {
+                    // Pehli baar — naya UUID banao
+                    deviceId = generateUUID();
+                    yield Promise.resolve(this.storage.set(DEVICE_ID_KEY, deviceId));
+                    this.log(`Naya Device ID banaya: ${deviceId}`);
+                }
+                else {
+                    this.log(`Existing Device ID mila: ${deviceId}`);
+                }
+                return deviceId;
+            }
+            catch (error) {
+                this.log(`Error: ${error}`);
+                // Fallback — storage fail ho toh bhi app crash na ho
+                return generateUUID();
+            }
+        });
+    }
+    resetDeviceID() {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield Promise.resolve(this.storage.delete(DEVICE_ID_KEY));
+            this.log('Device ID reset ho gaya');
+        });
+    }
+}
+exports.DeviceIDService = DeviceIDService;

package/lib/index.d.ts

@@ -0,0 +1,64 @@
+import { AttestationConfig, SecurityHeaders } from './types';
+export * from './types';
+export { DeviceIDService } from './DeviceIDService';
+export { AttestationService } from './AttestationService';
+export { axiosInterceptor, secureFetch } from './interceptors';
+/**
+ * App start pe ek baar call karo
+ *
+ * MMKV example:
+ * initAttestation({
+ *   storage: {
+ *     get: (key) => mmkv.getString(key) ?? null,
+ *     set: (key, val) => mmkv.set(key, val),
+ *     delete: (key) => mmkv.delete(key),
+ *   },
+ *   nonceEndpoint: 'https://api.yourapp.com/auth/nonce',
+ *   appVersion: '1.4',
+ *   debug: __DEV__,
+ * });
+ */
+export declare const initAttestation: (config: AttestationConfig) => void;
+/**
+ * Device ID lo
+ */
+export declare const getDeviceID: () => Promise<string>;
+/**
+ * Attestation token lo (cached ya fresh)
+ */
+export declare const getAttestationToken: (forceRefresh?: boolean) => Promise<string | null>;
+/**
+ * Sensitive operations ke liye fresh token
+ * Payment, Login, OTP pe ye use karo
+ */
+export declare const getFreshAttestationToken: () => Promise<string | null>;
+/**
+ * Saare security headers ek saath lo
+ * Interceptor mein ye use karo
+ */
+export declare const getSecurityHeaders: () => Promise<SecurityHeaders>;
+/**
+ * Axios interceptor setup
+ *
+ * import axios from 'axios';
+ * import { initAttestation, setupAxios } from 'react-native-app-attestation';
+ *
+ * const api = axios.create({ baseURL: '...' });
+ * setupAxios(api);
+ */
+export declare const setupAxios: (axiosInstance: any) => void;
+/**
+ * Secure fetch — fetch ki jagah use karo
+ *
+ * const res = await secureGet('https://api.com/user');
+ */
+export declare const secureGet: (url: string, options?: RequestInit) => Promise<Response>;
+export declare const securePost: (url: string, body: unknown, options?: RequestInit) => Promise<Response>;
+/**
+ * Logout pe call karo
+ */
+export declare const clearAttestationCache: () => void;
+/**
+ * Device ID reset karo
+ */
+export declare const resetDeviceID: () => Promise<void>;

package/lib/index.js

@@ -0,0 +1,171 @@
+"use strict";
+// src/index.ts
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetDeviceID = exports.clearAttestationCache = exports.securePost = exports.secureGet = exports.setupAxios = exports.getSecurityHeaders = exports.getFreshAttestationToken = exports.getAttestationToken = exports.getDeviceID = exports.initAttestation = exports.secureFetch = exports.axiosInterceptor = exports.AttestationService = exports.DeviceIDService = void 0;
+const react_native_1 = require("react-native");
+const DeviceIDService_1 = require("./DeviceIDService");
+const AttestationService_1 = require("./AttestationService");
+const interceptors_1 = require("./interceptors");
+// Re-export — user directly import kar sake
+__exportStar(require("./types"), exports);
+var DeviceIDService_2 = require("./DeviceIDService");
+Object.defineProperty(exports, "DeviceIDService", { enumerable: true, get: function () { return DeviceIDService_2.DeviceIDService; } });
+var AttestationService_2 = require("./AttestationService");
+Object.defineProperty(exports, "AttestationService", { enumerable: true, get: function () { return AttestationService_2.AttestationService; } });
+var interceptors_2 = require("./interceptors");
+Object.defineProperty(exports, "axiosInterceptor", { enumerable: true, get: function () { return interceptors_2.axiosInterceptor; } });
+Object.defineProperty(exports, "secureFetch", { enumerable: true, get: function () { return interceptors_2.secureFetch; } });
+// ========================================
+// SINGLETON — ek baar init, har jagah use
+// ========================================
+let deviceIDService = null;
+let attestationService = null;
+let globalConfig = null;
+/**
+ * App start pe ek baar call karo
+ *
+ * MMKV example:
+ * initAttestation({
+ *   storage: {
+ *     get: (key) => mmkv.getString(key) ?? null,
+ *     set: (key, val) => mmkv.set(key, val),
+ *     delete: (key) => mmkv.delete(key),
+ *   },
+ *   nonceEndpoint: 'https://api.yourapp.com/auth/nonce',
+ *   appVersion: '1.4',
+ *   debug: __DEV__,
+ * });
+ */
+const initAttestation = (config) => {
+    globalConfig = config;
+    deviceIDService = new DeviceIDService_1.DeviceIDService(config.storage, config.debug);
+    attestationService = new AttestationService_1.AttestationService(config);
+};
+exports.initAttestation = initAttestation;
+// Init check
+const checkInit = (fnName) => {
+    if (!deviceIDService || !attestationService || !globalConfig) {
+        throw new Error(`[react-native-app-attestation] ${fnName}() call karne se pehle initAttestation() call karo!`);
+    }
+};
+/**
+ * Device ID lo
+ */
+const getDeviceID = () => __awaiter(void 0, void 0, void 0, function* () {
+    checkInit('getDeviceID');
+    return deviceIDService.getDeviceID();
+});
+exports.getDeviceID = getDeviceID;
+/**
+ * Attestation token lo (cached ya fresh)
+ */
+const getAttestationToken = (...args_1) => __awaiter(void 0, [...args_1], void 0, function* (forceRefresh = false) {
+    checkInit('getAttestationToken');
+    const result = yield attestationService.getToken(forceRefresh);
+    return result.token;
+});
+exports.getAttestationToken = getAttestationToken;
+/**
+ * Sensitive operations ke liye fresh token
+ * Payment, Login, OTP pe ye use karo
+ */
+const getFreshAttestationToken = () => __awaiter(void 0, void 0, void 0, function* () {
+    checkInit('getFreshAttestationToken');
+    const result = yield attestationService.getFreshToken();
+    return result.token;
+});
+exports.getFreshAttestationToken = getFreshAttestationToken;
+/**
+ * Saare security headers ek saath lo
+ * Interceptor mein ye use karo
+ */
+const getSecurityHeaders = () => __awaiter(void 0, void 0, void 0, function* () {
+    checkInit('getSecurityHeaders');
+    const [deviceId, attestationResult] = yield Promise.all([
+        deviceIDService.getDeviceID(),
+        attestationService.getToken(),
+    ]);
+    const timestamp = Math.floor(Date.now() / 1000).toString();
+    const platform = react_native_1.Platform.OS === 'ios' ? 'iOS' : 'Android';
+    const headers = {
+        'User-Agent': `App/${globalConfig.appVersion} (${platform})`,
+        'X-App-Platform': react_native_1.Platform.OS,
+        'X-App-Version': globalConfig.appVersion,
+        'X-Device-ID': deviceId,
+        'X-Timestamp': timestamp,
+    };
+    if (attestationResult.token) {
+        headers['X-Attestation'] = attestationResult.token;
+    }
+    return headers;
+});
+exports.getSecurityHeaders = getSecurityHeaders;
+/**
+ * Axios interceptor setup
+ *
+ * import axios from 'axios';
+ * import { initAttestation, setupAxios } from 'react-native-app-attestation';
+ *
+ * const api = axios.create({ baseURL: '...' });
+ * setupAxios(api);
+ */
+const setupAxios = (axiosInstance) => {
+    checkInit('setupAxios');
+    (0, interceptors_1.axiosInterceptor)(axiosInstance, {
+        appVersion: globalConfig.appVersion,
+        getHeaders: exports.getSecurityHeaders,
+    });
+};
+exports.setupAxios = setupAxios;
+/**
+ * Secure fetch — fetch ki jagah use karo
+ *
+ * const res = await secureGet('https://api.com/user');
+ */
+const secureGet = (url, options) => {
+    checkInit('secureGet');
+    return (0, interceptors_1.secureFetch)(url, options !== null && options !== void 0 ? options : {}, exports.getSecurityHeaders);
+};
+exports.secureGet = secureGet;
+const securePost = (url, body, options) => {
+    checkInit('securePost');
+    return (0, interceptors_1.secureFetch)(url, Object.assign(Object.assign({}, options), { method: 'POST', body: JSON.stringify(body) }), exports.getSecurityHeaders);
+};
+exports.securePost = securePost;
+/**
+ * Logout pe call karo
+ */
+const clearAttestationCache = () => {
+    attestationService === null || attestationService === void 0 ? void 0 : attestationService.clearCache();
+};
+exports.clearAttestationCache = clearAttestationCache;
+/**
+ * Device ID reset karo
+ */
+const resetDeviceID = () => __awaiter(void 0, void 0, void 0, function* () {
+    yield (deviceIDService === null || deviceIDService === void 0 ? void 0 : deviceIDService.resetDeviceID());
+});
+exports.resetDeviceID = resetDeviceID;

package/lib/interceptors.d.ts

@@ -0,0 +1,18 @@
+import { SecurityHeaders } from './types';
+/**
+ * AXIOS ke liye
+ *
+ * Use karo:
+ * axiosInterceptor(api, { appVersion: '1.4', getHeaders })
+ */
+export declare const axiosInterceptor: (axiosInstance: any, options: {
+    appVersion: string;
+    getHeaders: () => Promise<SecurityHeaders>;
+}) => void;
+/**
+ * FETCH ke liye
+ *
+ * Use karo:
+ * const res = await secureFetch(url, options, getHeaders)
+ */
+export declare const secureFetch: (url: string, options: RequestInit | undefined, getHeaders: () => Promise<SecurityHeaders>) => Promise<Response>;

package/lib/interceptors.js

@@ -0,0 +1,56 @@
+"use strict";
+// src/interceptors.ts
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.secureFetch = exports.axiosInterceptor = void 0;
+/**
+ * AXIOS ke liye
+ *
+ * Use karo:
+ * axiosInterceptor(api, { appVersion: '1.4', getHeaders })
+ */
+const axiosInterceptor = (axiosInstance, options) => {
+    axiosInstance.interceptors.request.use((config) => __awaiter(void 0, void 0, void 0, function* () {
+        try {
+            // Security headers lo
+            const securityHeaders = yield options.getHeaders();
+            // Existing headers ke saath merge karo
+            config.headers = Object.assign(Object.assign({}, config.headers), securityHeaders);
+        }
+        catch (error) {
+            console.warn('[Attestation] Headers add nahi ho sake:', error);
+            // App crash nahi hona chahiye — silently fail
+        }
+        return config;
+    }), (error) => Promise.reject(error));
+};
+exports.axiosInterceptor = axiosInterceptor;
+/**
+ * FETCH ke liye
+ *
+ * Use karo:
+ * const res = await secureFetch(url, options, getHeaders)
+ */
+const secureFetch = (url_1, ...args_1) => __awaiter(void 0, [url_1, ...args_1], void 0, function* (url, options = {}, getHeaders) {
+    try {
+        // Security headers lo
+        const securityHeaders = yield getHeaders();
+        // Existing headers ke saath merge karo
+        const mergedHeaders = Object.assign(Object.assign({}, options.headers), securityHeaders);
+        return fetch(url, Object.assign(Object.assign({}, options), { headers: mergedHeaders }));
+    }
+    catch (error) {
+        console.warn('[Attestation] secureFetch headers error:', error);
+        // Headers add nahi hue — normal fetch karo
+        return fetch(url, options);
+    }
+});
+exports.secureFetch = secureFetch;

package/lib/types.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Storage interface — user apna storage dega
+ * MMKV, AsyncStorage, ya koi bhi
+ */
+export interface StorageAdapter {
+    get: (key: string) => string | null | Promise<string | null>;
+    set: (key: string, value: string) => void | Promise<void>;
+    delete: (key: string) => void | Promise<void>;
+}
+/**
+ * Package initialize karne ke liye config
+ */
+export interface AttestationConfig {
+    storage: StorageAdapter;
+    nonceEndpoint: string;
+    appVersion: string;
+    tokenCacheDurationMs?: number;
+    debug?: boolean;
+}
+/**
+ * Attestation token result
+ */
+export interface AttestationResult {
+    token: string | null;
+    fromCache: boolean;
+    platform: 'android' | 'ios';
+}
+/**
+ * Security headers jo API call mein jayenge
+ */
+export interface SecurityHeaders {
+    'User-Agent': string;
+    'X-App-Platform': string;
+    'X-App-Version': string;
+    'X-Device-ID': string;
+    'X-Timestamp': string;
+    'X-Attestation'?: string;
+}

package/lib/types.js

@@ -0,0 +1,3 @@
+"use strict";
+// src/types.ts
+Object.defineProperty(exports, "__esModule", { value: true });

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "react-native-app-attestation",
+  "version": "0.1.0",
+  "description": "Mobile app attestation for React Native — Android Play Integrity & iOS App Attest",
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "files": [
+    "src",
+    "lib",
+    "android",
+    "ios",
+    "react-native-app-attestation.podspec",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "prepare": "npm run build"
+  },
+  "keywords": [
+    "react-native",
+    "attestation",
+    "play-integrity",
+    "app-attest",
+    "security",
+    "android",
+    "ios"
+  ],
+  "author": "Madhurmeet Jadhav",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/madhurmeetjadhav/react-native-app-attestation"
+  },
+  "codegenConfig": {
+    "name": "ReactNativeAppAttestation",
+    "type": "all",
+    "jsSrcsDir": "src"
+  },
+  "react-native": "src/index.ts",
+  "source": "src/index.ts",
+  "peerDependencies": {
+    "react": "*",
+    "react-native": "*"
+  },
+  "devDependencies": {
+    "typescript": "^5.0.0",
+    "@types/react-native": "^0.72.0"
+  }
+}

package/react-native-app-attestation.podspec

@@ -0,0 +1,27 @@
+require "json"
+
+package = JSON.parse(File.read(File.join(__dir__, "package.json")))
+
+Pod::Spec.new do |s|
+  s.name         = "react-native-app-attestation"
+  s.version      = package["version"]
+  s.summary      = package["description"]
+  s.homepage     = "https://github.com/madhurmeetjadhav/react-native-app-attestation"
+  s.license      = "MIT"
+  s.authors      = { "Madhurmeet Jadhav" => "madhurmeetj@gmail.com" }
+  s.platforms    = { :ios => "14.0" }
+  s.source       = {
+    :git => "https://github.com/madhurmeetjadhav/react-native-app-attestation.git",
+    :tag => "#{s.version}"
+  }
+
+  s.source_files = "ios/**/*.{h,m,mm,swift}"
+
+  s.dependency "React-Core"
+
+  # Autolinking support
+  s.pod_target_xcconfig = {
+    "SWIFT_VERSION" => "5.0",
+    "DEFINES_MODULE" => "YES"
+  }
+end