react-native-safetynet-client v0.0.4

Google SafetyNet Attestation for React Native

About SafetyNet

Google provides an API to verify device integrity and detect harmful apps. See the SafetyNet documentation for more information.

Getting Started

$ npm install react-native-safetynet-client

or

$ yarn add react-native-google-safetynet-client

Mostly Automatic Installation

$ react-native link react-native-safetynet-client

Manual installation

Android

1. Open up android/app/src/main/java/[...]/MainActivity.java

• Add import com.arifaydogmus.safetynet.RNSafetyNetPackage; to the imports at the top of the file
• Add new RNSafetyNetPackage() to the list returned by the getPackages() method

2. Append the following lines to android/settings.gradle:

   include ':react-native-safetynet-client'
   project(':react-native-safetynet-client').projectDir = new File(rootProject.projectDir, 	'../node_modules/react-native-safetynet-client/android')

3. Insert the following lines inside the dependencies block in android/app/build.gradle:

     implementation project(':react-native-safetynet-client')

Usage

import RNSafetyNetClient from 'react-native-safetynet-client';

// STEP 1: Send nonce request to server with device unique id
const deviceId =
  'You can use the "react-native-device-info" module to get the unique id of device';

const nonceResult = await RNSafetyNetClient.requestNonce({
  endPointUrl: 'https://your-server/nonce-creator-endpoint',
  additionalData: deviceId,
});

if (!nonceResult.nonce || nonceResult.error) {
  console.log(nonceResult.error);
  return;
}

// STEP 2: Send attestation request to Google Play

const attestationResult = await RNSafetyNetClient.sendAttestationRequest(
  nonceResult.nonce,
  'YOUR API KEY'
);

if (!attestationResult.jws || attestationResult.error) {
  console.log('Attestation request failed.');
  return;
}

// STEP 3: Pass the JSW to your server for verification.

const verification = await RNSafetyNetClient.verifyAttestationResult({
  endPointUrl: 'https://your-server/verification-endpoint',
  attestationJws: attestationResult.jws,
});