Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@daily-co/react-native-daily-js
Advanced tools
React Native library for making video calls using Daily
The Daily JavaScript library for React Native.
This package introduces some constraints on what OS/SDK versions your project can support:
minSdkVersion
>= 23Install react-native-daily-js
along with its peer dependencies:
npm i @daily-co/react-native-daily-js @daily-co/react-native-webrtc @react-native-community/async-storage react-native-background-timer
Then, follow the below steps to set up your native project on each platform. Note that these steps assume you're using a version of React Native that supports autolinking (>= 60).
Update the platform
in your Podfile
, since @daily-co/react-native-webrtc
only works on iOS 10 and above:
platform :ios, '10.0'
Then run:
npx pod-install
Next, you will need to update your project's Info.plist
to add three new rows with the following keys:
NSCameraUsageDescription
NSMicrophoneUsageDescription
UIBackgroundModes
For the first two key's values, provide user-facing strings explaining why your app is asking for camera and microphone access. Note that the app will simply crash silently without these.
UIBackgroundModes
is handled slightly differently and will resolve to an array. For its first item, specify the value voip
. This ensures that audio will continue uninterrupted when your app is sent to the background.
To add the new rows through Xcode, open the Info.plist
and add the following three rows:
Key | Type | Value |
---|---|---|
Privacy - Camera Usage Description | String | "Daily Playground needs camera access to work" |
Privacy - Microphone Usage Description | String | "Daily Playground needs microphone access to work" |
Required background modes | Array | 1 item |
---> Item 0 | String | "App provides Voice over IP services" |
If you view the raw file contents of Info.plist
, it should look like this:
<dict>
...
<key>NSCameraUsageDescription</key>
<string>"Daily Playground needs camera access to work"</string>
<key>NSMicrophoneUsageDescription</key>
<string>"Daily Playground needs microphone access to work"</string>
<key>UIBackgroundModes</key>
<array>
<string>voip</string>
</array>
...
</dict>
Add the following permissions to AndroidManifest.xml
:
<uses-permission android:name="android.permission.CAMERA" />
<uses-feature android:name="android.hardware.camera" />
<uses-feature android:name="android.hardware.camera.autofocus"/>
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE"/>
<uses-permission android:name="android.permission.MODIFY_AUDIO_SETTINGS" />
<uses-permission android:name="android.permission.RECORD_AUDIO" />
<uses-permission android:name="android.permission.WAKE_LOCK" />
<uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE"/>
<uses-permission android:name="android.permission.FOREGROUND_SERVICE"/>
<application>
// ...
<service android:name="com.daily.reactlibrary.DailyOngoingMeetingForegroundService"/>
</application>
Update your minSdkVersion
in your top-level build.gradle
file:
minSdkVersion = 23
(If you run into any issues, refer to Github issues like these, or the react-native-webrtc
installation docs, which walk you through a more complicated process. The simpler process laid out above seems to work in a vanilla modern React Native CLI-based setup).
Your Daily room must be configured in a particular way in order for a react-native-daily-js
client to be able to connect to it: it must specify the property signaling_impl: ws
.
To create a room with the signaling_impl
property set appropriately, run the following (replacing <your-api-key>
with your actual API key):
curl --request POST \
--url https://api.daily.co/v1/rooms \
--header 'authorization: Bearer <your-api-key>' \
--header 'content-type: application/json' \
--data '{"properties":{"signaling_impl":"ws"}}'
Of course, you may also want to specify a name as well as other properties. See the Daily REST API docs for general guidance on how to create a new room or update an existing room.
react-native-daily-js
is the React Native counterpart to daily-js
, and can be used in pretty much the same way to add video calls to your apps. Complete documentation for daily-js
can be found here.
import Daily from '@daily-co/react-native-daily-js';
// ...
// Start joining a call
const call = Daily.createCallObject();
call.join({ url: 'https://your-team.daily.co/allhands' });
// Listen for events signaling changes to participants or their audio or video.
// This includes the local participant.
const events: DailyEvent[] = [
'participant-joined',
'participant-updated',
'participant-left',
];
for (const event of events) {
call.on(event, () => {
for (const participant of Object.values(call.participants())) {
console.log('---');
console.log(`participant ${participant.user_id}:`);
if (participant.local) {
console.log('is local');
}
if (participant.audio) {
console.log('audio enabled', participant.audioTrack);
}
if (participant.video) {
console.log('video enabled', participant.videoTrack);
}
}
});
}
import { DailyMediaView } from '@daily-co/react-native-daily-js';
// ...
<DailyMediaView
videoTrack={participant.videoTrack}
audioTrack={participant.audioTrack}
mirror={participant.local}
zOrder={participant.local ? 1 : 0}
style={someStyle}
/>;
See this blog post for a more thorough walkthrough of structuring a React video-chat app powered by Daily. It's focused on React web, but most of it should also apply to your React Native app.
FAQs
React Native library for making video calls using Daily
The npm package @daily-co/react-native-daily-js receives a total of 774 weekly downloads. As such, @daily-co/react-native-daily-js popularity was classified as not popular.
We found that @daily-co/react-native-daily-js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.