Security

Intro

This module provides security tools (e.g. GoogleSafetyNet) for Smartface applications.

GooglePlayServices

Helper class for Google Play Services. Android relies on a security Provider to provide secure network communications.
However, from time to time, vulnerabilities are found in the default security provider.
To protect against these vulnerabilities, Google Play services provides a way to automatically
update a device's security provider to protect against known exploits. By calling Google Play services methods,
your app can ensure that it's running on a device that has the latest updates to protect against known exploits.

$3

``js
import { GooglePlayServices } from "@smartface/security";
if (System.OS === "Android") {
GooglePlayServices.upgradeSecurityProvider()
.then(() => {
console.info(
"Provider is up-to-date, app can make secure network calls."
);
})
.catch((errorCode) => {
console.error("Error code: ", errorCode);
});
}
`

GoogleSafetyNet

Helper class for Google's SafetyNet. SafetyNet provides a set of services and APIs that help protect your app against security threats, including device tampering, bad URLs, potentially harmful apps, and fake users.

$3

`js
import { GoogleSafetyNet } from "@smartface/security";
if (System.OS === System.OSType.ANDROID) {
const googleSafetyNet = new GoogleSafetyNet({
apiKey: "",
});
if (googleSafetyNet.isPlayServicesAvailable()) {
let nonce = googleSafetyNet.generateNonce();
// Nonce should be at least 16 bytes length
googleSafetyNet
.sendAttestationRequest(nonce)
.then((jws) => {
console.info(JWS ${jws});
})
.catch((e) => {
console.error(e);
});
} else {
console.info(
"Google Play services are not available. You cannot proceed further"
);
}
}
``