Security

# ========== Usage as a stand alone ==============
job:
  ...
  steps:
    ... # create or download a build
    - template: "template/mobsf-scan.yaml"
      parameters:
        buildPath: "path/to/your/build.apk"
        outputDirectory: "output/directory/for/reports/"
# ========== Usage with build pipeline ==============
jobs:
  ...
  - template: "azure/apps/build-android-app.yaml@templates"
    parameters:
      ...
      runMobSFScan: true

dart pub add eit_security --hosted-url=https://gitea.whitelabel.mobile.embedit.dev/api/packages/platform/pub/

// android/app/build.gradle
android {
...
defaultConfig {
    ...
    minSdkVersion 23
        ...
    }
...
}

// android/app/build.gradle
dependencies {
    ...
    // add this line
    implementation 'com.github.prongbang:screen-protector:1.0.1'
    
}

import io.flutter.embedding.android.FlutterActivity
import com.prongbang.screenprotect.AndroidScreenProtector

class MainActivity: FlutterActivity() {
    private val screenProtector by lazy { AndroidScreenProtector.newInstance(this) }

    override fun onPause() {
        super.onPause()
        screenProtector.protect()
    }

    override fun onResume() {
        super.onResume()
        screenProtector.unprotect()
    }

    // For Android 12+
    override fun onWindowFocusChanged(hasFocus: Boolean) {
        super.onWindowFocusChanged(hasFocus)
        screenProtector.process(hasFocus.not())
    }
}

void main() {
  ...

  // This line is important!
  WidgetsFlutterBinding.ensureInitialized();

  // Cceate configuration
  final config = SecurityConfig(
    /// Settings of Android app
    androidConfig: AndroidSettings(
      /// The package name of the app
      packageName: 'com.embedit.app',
      /// Base64 encoded SHA-256 hash of the signing certificate
      signingCertHashes: [
        'AKoRu...'
      ],
      /// The list of allowed stores.
      /// GooglePlay - com.android.vending etc.
      /// Samsung Apps - com.sec.android.app.samsungapps
      /// Aptoid  - cm.aptoide.pt
      /// etc..
      supportedStores: ['some.other.store'],
    ),

    /// Settings of iOS app
    ios: IOSSettings(
      /// Bundle IDs of the app
      bundleIds: ['com.embedit.app','com.embedit.app.watch'],
      /// Team ID of the app
      teamId: 'M8AK35...',
    ),
    /// Email for sending reports
    contactMail: 'your_mail@example.com',
    /// dev vs release
    isProd: true,
  );
}

final navigatorKey = GlobalKey<NavigatorState>();
final RouteObserver<ModalRoute> routeObserver = RouteObserver<ModalRoute>();

final app = EitSecuredApp(
    config: config,
    /// Configuration for the lock screen
    /// If you want to enable the lock screen feature, provide a `LockScreenSettings` instance.
    lockScreen: LockScreenSettings(
        navigatorKey: navigatorKey,
        /// Defines the appearance and behavior of the lock screen.
        builder: (
            BuildContext context,
            VoidCallback closeCallback,
        ) => LockDialog(...),
        /// Specifies the delay before the lock screen appears when the app goes to the background.
        /// Setting this to `Duration.zero` means the lock screen will appear immediately.
        /// If set to `null`, the lock screen will not appear when the app goes to the background.
        backgroundDelayDuration: Duration.zero,
    ),
    security: SecuritySettings(
        /// Whether to start monitoring security incidents automatically when the app starts.
        startAutomatically: true,
        /// Enables or disables data leak protection for the entire app.
        dataLeakProtection: false,
        /// Enables or disables screenshot protection for the entire app.
        screenshotProtection: false,
    ),
    /// Custom callback function that gets triggered when a security incident is detected.
    onIncident: (incident) {},
    /// Error handler for handling exceptions during security operations
    onLog: (exception) {},
    /// Use this if you want to apply ScreenProtection widget to protect specific screens.
    routeObserver: routeObserver,
    child: MaterialApp(
        navigatorKey: navigatorKey,
        navigatorObservers: [routeObserver],
        ...
    ),
);

/// Some page managed by EitSecuredApp

@override
Widget build(BuildContext context) {
    final securedApp = EitSecuredApp.of(context);
    /// Show lock screen.
    final showLockScreenResult = await securedApp.showLockScreen();
    /// Enables screenshot protection.
    final enableScreenshotProtectionResult = await securedApp.security.enableScreenshotProtection();
    /// Disables screenshot protection.
    final disableScreenshotProtectionResult = await securedApp.security.disableScreenshotProtection();
    /// Enables data leakage protection.
    final enableLeakageResult = await securedApp.security.enableLeakageProtection();
    /// Disables data leakage protection.
    final disableLeakageResult = await securedApp.security.disableLeakageProtection();
    /// Enables both data leakage and screenshot protection.
    final enableScreenProtectionResult = await securedApp.security.enableScreenProtection();
    /// Disables both data leakage and screenshot protection.
    final disableScreenProtectionResult = await securedApp.security.disableScreenProtection();
    /// Use context to navigate to security issue page.
    context.showIssuePage(incident);
    ...
}