react-native-instantpay-code-push 1.1.8 → 1.2.0

package/ios/VersionedPreferencesService.swift

@@ -0,0 +1,93 @@
+//
+//  VersionedPreferencesService.swift
+//  InstantpayCodePush
+//
+//  Created by Dhananjay kumar on 09/02/26.
+//
+
+import Foundation
+
+enum PreferencesError: Error {
+    case configurationError
+    case setItemError(String)
+    case getItemError(String)
+}
+
+protocol PreferencesService {
+    func setItem(_ value: String?, forKey key: String) throws
+    func getItem(forKey key: String) throws -> String?
+}
+
+class VersionedPreferencesService: PreferencesService {
+    
+    private let userDefaults: UserDefaults
+    private var isolationKey: String = ""
+    
+    let CLASS_TAG = "*PreferencesService"
+    
+    init(userDefaults: UserDefaults = .standard) {
+        self.userDefaults = userDefaults
+    }
+    
+    /**
+     * Configures the service with isolation key.
+     * @param isolationKey The complete isolation key to use for storage
+     */
+    func configure(isolationKey: String) {
+        self.isolationKey = isolationKey
+        IpayCodePushHelper.logPrint(classTag: self.CLASS_TAG, log: "Configured with isolation key: \(self.isolationKey)")
+    }
+    
+    /**
+     * Creates a prefixed key for UserDefaults storage.
+     * @param key The base key to prefix
+     * @return The prefixed key
+     * @throws PreferencesError if configuration is missing
+     */
+    private func prefixedKey(forKey key: String) throws -> String {
+        guard !isolationKey.isEmpty else {
+            IpayCodePushHelper.logPrint(classTag: self.CLASS_TAG, log: "Warning: PreferencesService used before configure(isolationKey:) was called. Isolation key is empty.")
+            throw PreferencesError.configurationError
+        }
+        return "\(isolationKey)\(key)"
+    }
+    
+    /**
+     * Sets a value in preferences.
+     * @param value The value to store (or nil to remove)
+     * @param key The key to store under
+     * @throws PreferencesError if key prefixing fails
+     */
+    func setItem(_ value: String?, forKey key: String) throws {
+        do {
+            let fullKey = try prefixedKey(forKey: key)
+            if let valueToSet = value {
+                userDefaults.set(valueToSet, forKey: fullKey)
+                IpayCodePushHelper.logPrint(classTag: self.CLASS_TAG, log: "Set '\(fullKey)' = '\(valueToSet)'")
+            } else {
+                userDefaults.removeObject(forKey: fullKey)
+                IpayCodePushHelper.logPrint(classTag: self.CLASS_TAG, log: "Removed '\(fullKey)'")
+            }
+        } catch {
+            IpayCodePushHelper.logPrint(classTag: self.CLASS_TAG, log: "Error setting key '\(key)': \(error)")
+            throw PreferencesError.setItemError(key)
+        }
+    }
+    
+    /**
+     * Gets a value from preferences.
+     * @param key The key to retrieve
+     * @return The stored value or nil if not found
+     * @throws PreferencesError if key prefixing fails
+     */
+    func getItem(forKey key: String) throws -> String? {
+        do {
+            let fullKey = try prefixedKey(forKey: key)
+            return userDefaults.string(forKey: fullKey)
+        } catch {
+            IpayCodePushHelper.logPrint(classTag: self.CLASS_TAG, log: "Error getting key '\(key)': \(error)")
+            throw PreferencesError.getItemError(key)
+        }
+    }
+}
+

package/ios/ZipDecompressionStrategy.swift

@@ -0,0 +1,175 @@
+//
+//  ZipDecompressionStrategy.swift
+//  InstantpayCodePush
+//
+//  Created by Dhananjay kumar on 09/02/26.
+//
+
+import Foundation
+import SWCompression
+
+/**
+ * Strategy for handling ZIP compressed files
+ */
+class ZipDecompressionStrategy: DecompressionStrategy {
+    
+    private static let ZIP_MAGIC_NUMBER: [UInt8] = [0x50, 0x4B, 0x03, 0x04]
+    private static let MIN_ZIP_SIZE: UInt64 = 22
+    let CLASS_TAG = "ZipStrategy"
+    
+    func isValid(file: String) -> Bool {
+        guard FileManager.default.fileExists(atPath: file) else {
+            IpayCodePushHelper.logPrint(classTag: CLASS_TAG, log: "Invalid ZIP: file doesn't exist")
+            return false
+        }
+
+        do {
+            let attributes = try FileManager.default.attributesOfItem(atPath: file)
+            guard let fileSize = attributes[.size] as? UInt64, fileSize >= Self.MIN_ZIP_SIZE else {
+                IpayCodePushHelper.logPrint(classTag: CLASS_TAG, log: "Invalid ZIP: file too small")
+                return false
+            }
+        } catch {
+            IpayCodePushHelper.logPrint(classTag: CLASS_TAG, log: "Invalid ZIP: cannot read attributes - \(error.localizedDescription)")
+            return false
+        }
+
+        guard let fileHandle = FileHandle(forReadingAtPath: file) else {
+            IpayCodePushHelper.logPrint(classTag: CLASS_TAG, log: "Invalid ZIP: cannot open file")
+            return false
+        }
+
+        defer {
+            fileHandle.closeFile()
+        }
+
+        guard let header = try? fileHandle.read(upToCount: 4), header.count == 4 else {
+            IpayCodePushHelper.logPrint(classTag: CLASS_TAG, log: "Invalid ZIP: cannot read header")
+            return false
+        }
+
+        let magicBytes = [UInt8](header)
+        guard magicBytes == Self.ZIP_MAGIC_NUMBER else {
+            IpayCodePushHelper.logPrint(classTag: CLASS_TAG, log: "Invalid ZIP: wrong magic number")
+            return false
+        }
+
+        guard let zipData = try? Data(contentsOf: URL(fileURLWithPath: file)) else {
+            IpayCodePushHelper.logPrint(classTag: CLASS_TAG, log: "Invalid ZIP: cannot read file data")
+            return false
+        }
+
+        do {
+            _ = try ZipContainer.open(container: zipData)
+            return true
+        } catch {
+            IpayCodePushHelper.logPrint(classTag: CLASS_TAG, log: "Invalid ZIP: structure validation failed - \(error.localizedDescription)")
+            return false
+        }
+    }
+    
+    func decompress(file: String, to destination: String, progressHandler: @escaping (Double) -> Void) throws {
+        
+        IpayCodePushHelper.logPrint(classTag: CLASS_TAG, log: "Starting extraction of \(file) to \(destination)")
+
+        guard let zipData = try? Data(contentsOf: URL(fileURLWithPath: file)) else {
+            throw NSError(
+                domain: "IpayCodePush",
+                code: 1,
+                userInfo: [NSLocalizedDescriptionKey: "Failed to read ZIP file at: \(file)"]
+            )
+        }
+
+        progressHandler(0.1)
+
+        let zipEntries: [ZipEntry]
+        do {
+            zipEntries = try ZipContainer.open(container: zipData)
+            IpayCodePushHelper.logPrint(classTag: CLASS_TAG, log: "ZIP extraction successful, found \(zipEntries.count) entries")
+        } catch {
+            throw NSError(
+                domain: "IpayCodePush",
+                code: 2,
+                userInfo: [NSLocalizedDescriptionKey: "ZIP extraction failed: \(error.localizedDescription)"]
+            )
+        }
+
+        progressHandler(0.2)
+
+        let destinationURL = URL(fileURLWithPath: destination)
+        let canonicalDestination = destinationURL.standardized.path
+
+        let fileManager = FileManager.default
+        if !fileManager.fileExists(atPath: canonicalDestination) {
+            try fileManager.createDirectory(
+                atPath: canonicalDestination,
+                withIntermediateDirectories: true,
+                attributes: nil
+            )
+        }
+
+        let totalEntries = Double(zipEntries.count)
+        for (index, entry) in zipEntries.enumerated() {
+            try extractZipEntry(entry, to: canonicalDestination)
+            progressHandler(0.2 + (Double(index + 1) / totalEntries * 0.8))
+        }
+        
+        IpayCodePushHelper.logPrint(classTag: CLASS_TAG, log: "Successfully extracted all entries")
+    }
+
+    private func extractZipEntry(_ entry: ZipEntry, to destination: String) throws {
+        let fileManager = FileManager.default
+        let entryPath = entry.info.name.trimmingCharacters(in: .init(charactersIn: "/"))
+
+        guard !entryPath.isEmpty,
+              !entryPath.contains(".."),
+              !entryPath.hasPrefix("/") else {
+            IpayCodePushHelper.logPrint(classTag: CLASS_TAG, log: "Skipping suspicious path: \(entry.info.name)")
+            return
+        }
+
+        let fullPath = (destination as NSString).appendingPathComponent(entryPath)
+        let fullURL = URL(fileURLWithPath: fullPath)
+        let canonicalFullPath = fullURL.standardized.path
+        let canonicalDestination = URL(fileURLWithPath: destination).standardized.path
+
+        guard canonicalFullPath.hasPrefix(canonicalDestination + "/") ||
+              canonicalFullPath == canonicalDestination else {
+            throw NSError(
+                domain: "IpayCodePush",
+                code: 3,
+                userInfo: [NSLocalizedDescriptionKey: "Path traversal attempt detected: \(entry.info.name)"]
+            )
+        }
+
+        if entry.info.type == .directory {
+            if !fileManager.fileExists(atPath: canonicalFullPath) {
+                try fileManager.createDirectory(
+                    atPath: canonicalFullPath,
+                    withIntermediateDirectories: true,
+                    attributes: nil
+                )
+            }
+            return
+        }
+
+        if entry.info.type == .regular {
+            let parentPath = (canonicalFullPath as NSString).deletingLastPathComponent
+            if !fileManager.fileExists(atPath: parentPath) {
+                try fileManager.createDirectory(
+                    atPath: parentPath,
+                    withIntermediateDirectories: true,
+                    attributes: nil
+                )
+            }
+
+            guard let data = entry.data else {
+                IpayCodePushHelper.logPrint(classTag: CLASS_TAG, log: "Skipping file with no data: \(entry.info.name)")
+                return
+            }
+
+            try data.write(to: URL(fileURLWithPath: canonicalFullPath))
+            IpayCodePushHelper.logPrint(classTag: CLASS_TAG, log: "Extracted: \(entryPath)")
+        }
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-instantpay-code-push",
-  "version": "1.1.8",
+  "version": "1.2.0",
   "description": "React Native plugin for the CodePush service",
   "main": "./lib/module/index.js",
   "types": "./lib/typescript/src/index.d.ts",