react-native-safetynet-client

Google SafetyNet Attestation for React Native

About SafetyNet

Google provides an API to verify device integrity and detect harmful apps. See the SafetyNet documentation for more information.

Getting Started

$ npm install react-native-safetynet-client

or

$ yarn add react-native-google-safetynet-client

Mostly Automatic Installation

$ react-native link react-native-safetynet-client

Manual installation

Android

1. Open up android/app/src/main/java/[...]/MainActivity.java

• Add import com.arifaydogmus.safetynet.RNSafetyNetPackage; to the imports at the top of the file
• Add new RNSafetyNetPackage() to the list returned by the getPackages() method

1. Append the following lines to android/settings.gradle:

   include ':react-native-safetynet-client'
   project(':react-native-safetynet-client').projectDir = new File(rootProject.projectDir, 	'../node_modules/react-native-safetynet-client/android')
   

2. Insert the following lines inside the dependencies block in android/app/build.gradle:

     implementation project(':react-native-safetynet-client')
   

Usage

import RNSafetyNetClient from 'react-native-safetynet-client';
 
// STEP 1: Send nonce request to server with device unique id
const deviceId =
  'You can use the "react-native-device-info" module to get the unique id of device';
 
const nonceResult = await RNSafetyNetClient.requestNonce({
  endPointUrl: 'https://your-server/nonce-creator-endpoint',
  additionalData: deviceId,
});
 
if (!nonceResult.nonce || nonceResult.error) {
  console.log(nonceResult.error);
  return;
}
 
// STEP 2: Send attestation request to Google Play
 
const attestationResult = await RNSafetyNetClient.sendAttestationRequest(
  nonceResult.nonce,
  'YOUR API KEY'
);
 
if (!attestationResult.jws || attestationResult.error) {
  console.log('Attestation request failed.');
  return;
}
 
// STEP 3: Pass the JSW to your server for verification.
 
const verification = await RNSafetyNetClient.verifyAttestationResult({
  endPointUrl: 'https://your-server/verification-endpoint',
  attestationJws: attestationResult.jws,
});