npm publish

Author: TeruyaHaroldo

.npmignore

@@ -0,0 +1,21 @@
+demo/
+.idea/
+support/
+*.tar
+*.tgz
+.npmignore
+*.map
+*.ts
+tsconfig.json
+scripts
+.DS_Store
+*.aar
+node_modules
+*.esm.json
+!extractTGZ.js
+*.js.map
+*.log
+
+# Editor directories and files
+.idea
+.vscode

README.md

@@ -0,0 +1 @@
+# nativescript-yoonit-handshakeA NativeScript NPM implementing dynamic SSL pinning for Android and iOS.* [About](#about)* [Installation](#installation)* [Usage](#usage)* [API](#api)    * [Method](#method)    * [Event](#event)    * [Handshake Result](#handshake-result)* [To contribute and make it better](#to-contribute-and-make-it-better)## AboutThe SSL pinning is a technique mitigating man-in-the-middle attacks against the secure HTTP communication, but has a drawback, the certificate's expiration date. This resolve this problem, implementing dynamic SSL pinning, providing easy to use fingerprint validation on the TLS handshake. The remote server must be the responsible to update the certificate(s).## Installation```npm i -s @yoonit/nativescript-handshake  ```> ### Special thanks and credits...> The current version of the library depends on `[Wultra SSL Pinning]` ([Android]((https://github.com/wultra/ssl-pinning-android) and [iOS]((https://github.com/wultra/ssl-pinning-ios)))).## Usage```javascriptfunction updateFingerprint() {  this.$yoo.handshake.updateFingerprints(    "YOUR PUBLIC KEY",    "YOUR SERVICE URL",    (result) => {      switch (result) {        case HandshakeResult.OK:          // - Everything is OK;          // - No Action is required;          return;        case HandshakeResult.STORE_IS_EMPTY:          // - The update request succeeded;          // - Result is still an empty list of certificates;          // - May loading & validating of remote data succeeded;          // - All loaded certificates are already expired;"          return;        case HandshakeResult.NETWORK_ERROR:          // - The update request failed on a network communication.          return;        case HandshakeResult.INVALID_DATA:          // The update request returned the data which did not pass the signature validation.          return;        case HandshakeResult.INVALID_SIGNATURE:          // The update request returned the data which did not pass the signature validation.          return;        case HandshakeResult.INVALID_URL_SERVICE:          // The url service does not exist or is invalid.          return;      }    }  );}```## API### Method| Function          | Parameters                                                                   | Description| -                 | -                                                                            | -| updateFingerprint | `publicKey: string, serviceUrl: string, callback: (result: string) => void`  | Update the list of fingerprints from the remote server. The method is asynchronous. Response can get in the callback.### Handshake Result| HandshakeResult         | Description| -                       | -| `"OK"`                  | <ul><li>Everything is OK;</li><li>No Action is required;</li></ul>| `STORE_IS_EMPTY"`       | <ul><li>The update request succeeded;</li><li>Result is still an empty list of certificates;</li><li>May loading & validating of remote data succeeded;</li><li>All loaded certificates are already expired;</li><li>All loaded certificates are already expired;</li></ul>| `"NETWORK_ERROR"`       | The update request failed on a network communication.| `"INVALID_DATA"`        | The update request returned the data which did not pass the signature validation.| `"INVALID_SIGNATURE"`   | The update request returned the data which did not pass the signature validation.| `"INVALID_URL_SERVICE"` | The url service does not exist or is invalid.## To contribute and make it betterClone the repo, change what you want and send PR.For commit messages we use <a href="https://www.conventionalcommits.org/">Conventional Commits</a>.Contributions are always welcome!<a href="https://github.com/Yoonit-Labs/ios-yoonit-handshake/graphs/contributors">  <img src="https://contrib.rocks/image?repo=Yoonit-Labs/ios-yoonit-handshake" /></a>---Code with ❤ by the [**Cyberlabs AI**](https://cyberlabs.ai/) Front-End Team

Result.d.ts

@@ -0,0 +1,9 @@
+declare const Result: {
+    OK: string;
+    STORE_IS_EMPTY: string;
+    NETWORK_ERROR: string;
+    INVALID_DATA: string;
+    INVALID_SIGNATURE: string;
+    INVALID_URL_SERVICE: string;
+};
+export default Result;

Result.js

@@ -0,0 +1 @@
+// +-+-+-+-+-+-+// |y|o|o|n|i|t|// +-+-+-+-+-+-+//// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+// | Yoonit Handshake Plugin for NativeScript applications           |// | Luigui Delyer, Gabriel Rizzo,                                   |// | Haroldo Teruya & Victor Goulart @ Cyberlabs AI 2020-2021        |// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+const Result = {    OK: "OK",    STORE_IS_EMPTY: "STORE_IS_EMPTY",    NETWORK_ERROR: "NETWORK_ERROR",    INVALID_DATA: "INVALID_DATA",    INVALID_SIGNATURE: "INVALID_SIGNATURE",    INVALID_URL_SERVICE: "INVALID_URL_SERVICE",};export default Result;

Result.js.map

@@ -0,0 +1,15 @@
+import { HandshakeBase } from "./Yoonit.Handshake.common";
+export declare class YoonitHandshake extends HandshakeBase {
+    native: com.yoonit.handshake.Handshake;
+    handshakeListener: HandshakeEventListener;
+    constructor();
+    updateFingerprints(publicKey: string, serviceUrl: string, callback: (result: string) => void): void;
+}
+declare class HandshakeEventListener extends java.lang.Object implements com.yoonit.handshake.HandshakeListener {
+    private owner;
+    resultCallback: (result: string) => void;
+    static initWithOwner(owner: WeakRef<YoonitHandshake>): HandshakeEventListener;
+    continueExecution(): void;
+    handleFailedUpdate(type: string, result: string): void;
+}
+export {};

Result.ts

@@ -0,0 +1,93 @@
+// +-+-+-+-+-+-+
+// |y|o|o|n|i|t|
+// +-+-+-+-+-+-+
+//
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+// | Yoonit Handshake Plugin for NativeScript applications           |
+// | Luigui Delyer, Gabriel Rizzo,                                   |
+// | Haroldo Teruya & Victor Goulart @ Cyberlabs AI 2020-2021        |
+// +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
+
+import * as application from "@nativescript/core/application";
+import { HandshakeBase } from "./Yoonit.Handshake.common";
+import Result from './Result';
+
+export class YoonitHandshake extends HandshakeBase {
+
+    native: com.yoonit.handshake.Handshake;
+    handshakeListener: HandshakeEventListener;
+
+    constructor() {
+        super();
+
+        application.on(application.launchEvent, () => {
+            let context = application.android.context;
+            this.handshakeListener = HandshakeEventListener.initWithOwner(new WeakRef(this));
+            this.native = new com.yoonit.handshake.Handshake(context, this.handshakeListener);
+        });
+    }
+
+    public updateFingerprints(
+        publicKey: string,
+        serviceUrl: string,
+        callback: (result: string) => void
+    ): void {
+        this.handshakeListener.resultCallback = callback
+        this.native.updateFingerprint(publicKey, serviceUrl);
+    }
+}
+
+@Interfaces([com.yoonit.handshake.HandshakeListener])
+@NativeClass
+class HandshakeEventListener extends java.lang.Object implements com.yoonit.handshake.HandshakeListener {
+
+    private owner: WeakRef<YoonitHandshake>;
+    public resultCallback: (result: string) => void;
+
+    public static initWithOwner(owner: WeakRef<YoonitHandshake>): HandshakeEventListener {
+        const listener = new HandshakeEventListener as HandshakeEventListener;
+        listener.owner = owner;
+
+        return listener;
+    }
+
+    public continueExecution(): void {
+        if (!this.resultCallback || !this.owner.get()) {
+            return;
+        }
+
+        this.resultCallback(Result.OK)
+    }
+
+    public handleFailedUpdate(type: string, result: string): void {
+        if (!this.resultCallback || !this.owner.get()) {
+            return;
+        }
+
+        switch (result) {
+            case Result.OK:
+                this.resultCallback(Result.OK);
+                return;
+
+            case Result.STORE_IS_EMPTY:
+                this.resultCallback(Result.STORE_IS_EMPTY);
+                return;
+
+            case Result.NETWORK_ERROR:
+                this.resultCallback(Result.NETWORK_ERROR);
+                return;
+
+            case Result.INVALID_DATA:
+                this.resultCallback(Result.INVALID_DATA);
+                return;
+
+            case Result.INVALID_SIGNATURE:
+                this.resultCallback(Result.INVALID_SIGNATURE);
+                return;
+
+            case Result.INVALID_URL_SERVICE:
+                this.resultCallback(Result.INVALID_URL_SERVICE);
+                return;
+        }
+    }
+}