react-native-safetynet-client

Google SafetyNet Attestation for React Native

About SafetyNet

Google provides an API to verify device integrity and detect harmful apps. See the SafetyNet documentation for more information.

Getting Started

$ npm install react-native-safetynet-client

or

$ yarn add react-native-google-safetynet-client

Mostly Automatic Installation

$ react-native link react-native-safetynet-client

Manual installation

Android

• Open up android/app/src/main/java/[...]/MainActivity.java

• Add import com.arifaydogmus.safetynet.RNSafetyNetPackage; to the imports at the top of the file
• Add new RNSafetyNetPackage() to the list returned by the getPackages() method

• Append the following lines to android/settings.gradle:

  include ':react-native-safetynet-client'
  project(':react-native-safetynet-client').projectDir = new File(rootProject.projectDir, 	'../node_modules/react-native-safetynet-client/android')
  

• Insert the following lines inside the dependencies block in android/app/build.gradle:

    implementation project(':react-native-safetynet-client')
  

Usage

import RNSafetyNetClient from 'react-native-safetynet-client';

// STEP 1: Send nonce request to server with device unique id
const deviceId =
  'You can use the "react-native-device-info" module to get the unique id of device';

const nonceResult = await RNSafetyNetClient.requestNonce({
  endPointUrl: 'https://your-server/nonce-creator-endpoint',
  additionalData: deviceId,
});

if (!nonceResult.nonce || nonceResult.error) {
  console.log(nonceResult.error);
  return;
}

// STEP 2: Send attestation request to Google Play

const attestationResult = await RNSafetyNetClient.sendAttestationRequest(
  nonceResult.nonce,
  'YOUR API KEY'
);

if (!attestationResult.jws || attestationResult.error) {
  console.log('Attestation request failed.');
  return;
}

// STEP 3: Pass the JSW to your server for verification.

const verification = await RNSafetyNetClient.verifyAttestationResult({
  endPointUrl: 'https://your-server/verification-endpoint',
  attestationJws: attestationResult.jws,
});