react-native-instantpay-code-push 1.2.4 → 1.2.6

package/InstantpayCodePush.podspec

@@ -14,8 +14,9 @@ Pod::Spec.new do |s|
   s.source       = { :git => "https://github.com/InstantPay/react-native-instantpay-code-push.git", :tag => "#{s.version}" }
 
   s.source_files = "ios/**/*.{h,m,mm,swift,cpp}"
-  s.public_header_files = "ios/**/*.h"
   #s.private_header_files = "ios/**/*.h"
+  s.public_header_files = "ios/IpayCodePush/Public/*.h"
+  s.private_header_files = "ios/IpayCodePush/Private/*.h"
 
   s.pod_target_xcconfig = {
     "DEFINES_MODULE" => "YES",

package/ios/{InstantpayCodePush.mm → IpayCodePush/Private/InstantpayCodePush.mm}

@@ -328,7 +328,7 @@ RCT_EXPORT_MODULE();
         .APP_VERSION = [IpayCodePushImpl appVersion],
         .CHANNEL = [impl getChannel],
         .FINGERPRINT_HASH = [impl getFingerprintHash],
-        .KEYSTORE_PUBLIC_KEY = nil
+        .KEYSTORE_PUBLIC_KEY = [IpayCodePushImpl getKeyChainPublickey],
     });
 }
 

package/ios/{IpayCodePushImpl.swift → IpayCodePush/Private/IpayCodePushImpl.swift}

@@ -94,6 +94,10 @@ import React
         return "ipaycodepush_\(baseKey)_\(appChannel)_"
     }
     
+    public static var getKeyChainPublickey: String {
+        return SignatureVerifier.getDevicePublicKeyBase64() ?? ""
+    }
+    
     // MARK: - Channel Management
     
     /**

package/ios/{SignatureVerifier.swift → IpayCodePush/Private/SignatureVerifier.swift}

@@ -300,7 +300,7 @@ public class SignatureVerifier {
      */
     private static func createPublicKey(from publicKeyPEM: String) -> Result<SecKey, SignatureVerificationError> {
         // Remove PEM headers/footers and whitespace
-        var keyString = publicKeyPEM
+        let keyString = publicKeyPEM
             .replacingOccurrences(of: "-----BEGIN PUBLIC KEY-----", with: "")
             .replacingOccurrences(of: "-----END PUBLIC KEY-----", with: "")
             .replacingOccurrences(of: "\\n", with: "")
@@ -354,5 +354,73 @@ public class SignatureVerifier {
         return data
     }
     
+    private static let KEY_ALIAS = "com.ipaycodepush.security.rsa"
+    
+    /**
+    *  Get Device Public Key of generated KeyChain
+    */
+    public static func getDevicePublicKeyBase64() -> String? {
+
+        if let existingKey = getPrivateKey() {
+            return exportPublicKeyBase64(from: existingKey)
+        }
+
+        // If not exists → generate
+        generateKeyChain()
+        guard let newKey = getPrivateKey() else { return nil }
+        return exportPublicKeyBase64(from: newKey)
+    }
+    
+    /**
+    * Generate a new EC key pair entry in the Ios Keychain by
+    * using the KeyPairGenerator API.
+    */
+    
+    private static func generateKeyChain() -> Void {
+        
+        let tagData = KEY_ALIAS.data(using: .utf8)!
+
+        let attributes: [String: Any] = [
+            kSecAttrKeyType as String: kSecAttrKeyTypeRSA,
+            kSecAttrKeySizeInBits as String: 2048,
+            kSecAttrTokenID as String: kSecAttrTokenIDSecureEnclave,
+            kSecPrivateKeyAttrs as String: [
+                kSecAttrIsPermanent as String: true,
+                kSecAttrApplicationTag as String: tagData
+            ]
+        ]
+
+        SecKeyCreateRandomKey(attributes as CFDictionary, nil)
+    }
+    
+    /**
+     * Get Private Key of device keychain
+     */
+    private static func getPrivateKey() -> SecKey? {
+
+        let tagData = KEY_ALIAS.data(using: .utf8)!
+
+        let query: [String: Any] = [
+            kSecClass as String: kSecClassKey,
+            kSecAttrApplicationTag as String: tagData,
+            kSecAttrKeyType as String: kSecAttrKeyTypeRSA,
+            kSecReturnRef as String: true
+        ]
+
+        var item: CFTypeRef?
+        SecItemCopyMatching(query as CFDictionary, &item)
+        return (item as! SecKey?)
+    }
+    
+    /**
+    * Get Public key of generated Private Key
+    */
+    private static func exportPublicKeyBase64(from privateKey: SecKey) -> String? {
+
+        guard let publicKey = SecKeyCopyPublicKey(privateKey) else { return nil }
+        guard let data = SecKeyCopyExternalRepresentation(publicKey, nil) as Data? else { return nil }
+
+        return data.base64EncodedString()
+    }
     
 }

package/ios/{InstantpayCodePush.h → IpayCodePush/Public/InstantpayCodePush.h}

@@ -1,8 +1,13 @@
-#import <InstantpayCodePushSpec/InstantpayCodePushSpec.h>
 #import <React/RCTEventEmitter.h>
 #import <React/RCTBundleURLProvider.h>
 
+#ifdef RCT_NEW_ARCH_ENABLED
+#import <InstantpayCodePushSpec/InstantpayCodePushSpec.h>
 @interface InstantpayCodePush : RCTEventEmitter <NativeInstantpayCodePushSpec>
+#else
+#import <React/RCTBridgeModule.h>
+@interface InstantpayCodePush : RCTEventEmitter <RCTBridgeModule>
+#endif
 
 /**
  * Returns the currently active bundle URL from the default (static) instance.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-instantpay-code-push",
-  "version": "1.2.4",
+  "version": "1.2.6",
   "description": "React Native plugin for the CodePush service",
   "main": "./lib/module/index.js",
   "types": "./lib/typescript/src/index.d.ts",