Update: New version of freeRASP

Author: yardexx

README.md

@@ -2,6 +2,13 @@
 
 freeRASP for Flutter is a part of security SDK for the app shielding and security monitoring. Learn more about provided features on the [freeRASP's main repository](https://github.com/talsec/Free-RASP-Community) first. You can find freeRASP Flutter plugin on [pub.dev](https://pub.dev/packages/freerasp).
 
+<table>
+<tbody>
+<td>⚠️ Attention ⚠️ Update to the latest (<strong>1.1.0</strong>) version. Previous versions contain a bug that impacts logged data.<br>
+</td>
+</tbody>
+</table>
+
 # Usage
 We will guide you step-by-step, but you can always check the expected result  This is how final implementation should look like:
 
@@ -11,7 +18,7 @@ We will guide you step-by-step, but you can always check the expected result  Th
 Add dependency to your `pubspec.yaml` file  
 ```yaml
 dependencies:
-  freerasp: 1.0.0
+  freerasp: 1.1.0
 ```  
 and then run: `pub get`
 
@@ -54,13 +61,13 @@ fi
 
 ### Android setup
 * From root of your project, go to **android > app > build.gradle**
-* In `defaultConfig` update `minSdkVersion` to at least **19** (Android 4.4) or higher
+* In `defaultConfig` update `minSdkVersion` to at least **21** (Android 5.0) or higher
 ```gradle
 android {
 ...
 defaultConfig {
     ...
-    minSdkVersion 19
+    minSdkVersion 21
     ...
     }
 ...
@@ -101,8 +108,8 @@ class _MyAppState extends State<MyApp> {
 
 ```
 and then create a Talsec config and insert `androidConfig` and/or `IOSConfig` with highlighted identifiers: `expectedPackageName` and `expectedSigningCertificateHash` are needed for Android version.  
-`expectedPackageName` - package name of your app which you chose when you created it  
-`expectedSigningCertificateHash` - hash of the certificate of the key which was used to sign the application. **Hash which is passed here must be encoded in Base64 form.**
+`expectedPackageName` - package name of your app you chose when you created it  
+`expectedSigningCertificateHash` - hash of the certificate of the key which was used to sign the application. **Hash which is passed here must be encoded in Base64 form**
 Similarly, `appBundleId` and `appTeamId` are needed for iOS version of app. If you publish on the Google Play Store and/or Huawei AppGallery, you **don't have to assign anything** to `supportedAlternativeStores` as those are supported out of the box.  
 
 Lastly, pass a mail address to `watcherMail` to be able to get reports. Mail has a strict form `name@domain.com` which is passed as String.
@@ -149,9 +156,10 @@ void initState(){
       androidCallback: AndroidCallback(
           onRootDetected: () => print('Root detected'),
           onEmulatorDetected: () => print('Emulator detected'),
-          onFingerprintDetected: () => print('Fingerprint detected'),
           onHookDetected: () => print('Hook detected'),
           onTamperDetected: () => print('Tamper detected'),
+          onDeviceBinding: () => print('Device binding detected'),
+          onUntrustedInstallationDetected: () => print('Untrusted installation detected'),
       ),
 
       // For iOS
@@ -163,6 +171,8 @@ void initState(){
         onPasscodeDetected: () => print('Passcode detected'),
         onSimulatorDetected: () => print('Simulator detected'),
         onMissingSecureEnclaveDetected: () => print('Missing secure enclave detected'),
+        onDeviceChangeDetected: () => print('Device change detected'),
+        onDeviceIdDetected: () => print('Device ID detected'),
       ),
 
       // Common for both platforms
@@ -189,19 +199,23 @@ void initState(){
 And you're done 🎉!  
 
 # Troubleshooting
-### `Could not find ... ` dependency issue  
-**Solution:** Add dependency manually (see this [issue](https://github.com/talsec/Free-RASP-Flutter/issues/1))  
+### \[Android] `Cloud not find ... ` dependency issue  
+**Solution:** Add dependency manually (see [issue](https://github.com/talsec/Free-RASP-Flutter/issues/1))  
 In android -> app -> build.gradle add these dependencies
  ```gradle
 dependencies {
 
-    ...some other dependecies...
+  ... some other dependecies ...
 
     // Talsec Release
-    releaseImplementation 'com.aheaditec.talsec.security:TalsecSecurity-Community:2.6.0-release'
+    debugImplementation 'com.aheaditec.talsec.security:TalsecSecurity-Community:3.1.0-dev'
 
     // Talsec Debug
-    debugImplementation 'com.aheaditec.talsec.security:TalsecSecurity-Community:2.6.0-dev'
+    releaseImplementation 'com.aheaditec.talsec.security:TalsecSecurity-Community:3.1.0-release'
 }
 
- ```
+ ```
+
+### \[iOS] Unable to build release for simulator in Xcode (errors)
+**Solution:** Simulator does **not** support release build of Flutter - more about it [here](https://flutter.dev/docs/testing/build-modes#release).
+Use real device in order to build app in release mode.

android/app/build.gradle

@@ -35,7 +35,7 @@ android {
     defaultConfig {
         // TODO: Specify your own unique Application ID (https://developer.android.com/studio/build/application-id.html).
         applicationId "com.aheaditec.freerasp_example"
-        minSdkVersion 19
+        minSdkVersion 21
         targetSdkVersion 30
         versionCode flutterVersionCode.toInteger()
         versionName flutterVersionName

ios/Podfile.lock

@@ -15,8 +15,8 @@ EXTERNAL SOURCES:
 
 SPEC CHECKSUMS:
   Flutter: 434fef37c0980e73bb6479ef766c45957d4b510c
-  freerasp: cf77912fd2d8ad087abcba5b591802e401646230
+  freerasp: 3516f6bd34a4d386ab4a20aa7a5ca8310d5c3a09
 
 PODFILE CHECKSUM: aafe91acc616949ddb318b77800a7f51bffa2a4c
 
-COCOAPODS: 1.10.1
+COCOAPODS: 1.10.2

lib/main.dart

@@ -18,7 +18,8 @@ class _MyAppState extends State<MyApp> {
   String _emulatorState = 'Secured';
   String _tamperState = 'Secured';
   String _hookState = 'Secured';
-  String _fingerPrintState = 'Secured';
+  String _untrustedInstallationSourceState = 'Secured';
+  String _deviceBindingState = 'Secured';
 
   // String to hold state (iOS)
   String _signatureState = 'Secured';
@@ -28,6 +29,8 @@ class _MyAppState extends State<MyApp> {
   String _passcodeChangeState = 'Secured';
   String _simulatorState = 'Secured';
   String _missingSecureEnclaveState = 'Secured';
+  String _deviceChangeState = 'Secured';
+  String _deviceIdDetectedState = 'Secured';
 
   // String to hold state (common)
   String _debuggerState = 'Secured';
@@ -41,7 +44,9 @@ class _MyAppState extends State<MyApp> {
         Text('Emulator: $_emulatorState\n'),
         Text('Tamper: $_tamperState\n'),
         Text('Hook: $_hookState\n'),
-        Text('Fingerprint: $_fingerPrintState\n'),
+        Text('Device binding: $_deviceBindingState\n'),
+        Text(
+            'Untrusted source of installation: $_untrustedInstallationSourceState\n'),
       ];
     }
     return [
@@ -53,6 +58,8 @@ class _MyAppState extends State<MyApp> {
       Text('Passcode change: $_passcodeChangeState\n'),
       Text('Simulator: $_simulatorState\n'),
       Text('Missing secure enclave: $_missingSecureEnclaveState\n'),
+      Text('Device change: $_deviceChangeState\n'),
+      Text('Device ID: $_deviceIdDetectedState\n')
     ];
   }
 
@@ -97,11 +104,6 @@ class _MyAppState extends State<MyApp> {
             _emulatorState = 'Detected';
           });
         },
-        onFingerprintDetected: () {
-          setState(() {
-            _fingerPrintState = 'Detected';
-          });
-        },
         onHookDetected: () {
           setState(() {
             _hookState = 'Detected';
@@ -112,6 +114,16 @@ class _MyAppState extends State<MyApp> {
             _tamperState = 'Detected';
           });
         },
+        onDeviceBindingDetected: () {
+          setState(() {
+            _deviceBindingState = 'Detected';
+          });
+        },
+        onUntrustedInstallationDetected: () {
+          setState(() {
+            _untrustedInstallationSourceState = 'Detected';
+          });
+        },
       ),
 
       /// For iOS
@@ -151,6 +163,16 @@ class _MyAppState extends State<MyApp> {
             _missingSecureEnclaveState = 'Detected';
           });
         },
+        onDeviceChangeDetected: () {
+          setState(() {
+            _deviceChangeState = 'Detected';
+          });
+        },
+        onDeviceIdDetected: () {
+          setState(() {
+            _deviceIdDetectedState = 'Detected';
+          });
+        },
       ),
 
       /// Debugger is common for both platforms
@@ -188,4 +210,4 @@ class _MyAppState extends State<MyApp> {
       ),
     );
   }
-}
+}

pubspec.lock

@@ -73,7 +73,7 @@ packages:
       name: freerasp
       url: "https://pub.dartlang.org"
     source: hosted
-    version: "0.0.2"
+    version: "1.1.0"
   matcher:
     dependency: transitive
     description:

pubspec.yaml

@@ -12,7 +12,7 @@ environment:
 dependencies:
   flutter:
     sdk: flutter
-  freerasp: 1.0.0
+  freerasp: 1.1.0
 
   cupertino_icons: ^1.0.2