@bitwala/react-native-safetynet
Advanced tools
Google provides an API to verify device integrity and detect harmful apps. See the SafetyNet documentation for more information.
$ npm install @bitwala/react-native-safetynet
or
$ yarn add @bitwala/react-native-safetynet
$ react-native link @bitwala/react-native-safetynet
android/app/src/main/java/[...]/MainActivity.javaimport com.bitwala.safetynet.RNSafetyNetPackage; to the imports at the top of the filenew RNSafetyNetPackage() to the list returned by the getPackages() methodandroid/settings.gradle:
include ':@bitwala/react-native-safetynet'
project(':@bitwala/react-native-safetynet').projectDir = new File(rootProject.projectDir, '../node_modules/@bitwala/react-native-safetynet/android')
android/app/build.gradle:
implementation project(':@bitwala/react-native-safetynet')
import RNSafetyNetClient from '@bitwala/react-native-safetynet';
// STEP 1: Send nonce request to server with device unique id
const deviceId =
'You can use the "react-native-device-info" module to get the unique id of device';
const nonceResult = await RNSafetyNetClient.requestNonce({
endPointUrl: 'https://your-server/nonce-creator-endpoint',
additionalData: deviceId,
});
if (!nonceResult.nonce || nonceResult.error) {
console.log(nonceResult.error);
return;
}
// STEP 2: Send attestation request to Google Play
const attestationResult = await RNSafetyNetClient.sendAttestationRequest(
nonceResult.nonce,
'YOUR API KEY'
);
if (!attestationResult.jws || attestationResult.error) {
console.log('Attestation request failed.');
return;
}
// STEP 3: Pass the JSW to your server for verification.
const verification = await RNSafetyNetClient.verifyAttestationResult({
endPointUrl: 'https://your-server/verification-endpoint',
attestationJws: attestationResult.jws,
});
FAQs
## About SafetyNet
We found that @bitwala/react-native-safetynet demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.