Skip to main content

Cordova

If needed we can provide a generic cordova plugin to access Mobile Protection Shield's native API's. This plugin needs to be modified according to the project's configuration. See Client specifics

Supported Platforms​

  • Android (>= 19)
  • iOS 11+
  • iPadOS 11+

Installation​

The plugin can be installed via Cordova's CLI and should be stored locally or in a private repository.

Execute from the project's root folder:

cordova plugin add <path> --nofetch --nosave

Usage​

The plugin creates the object MobileProtectionShield and is only accessible after deviceready has been fired.

document.addEventListener('deviceready', function () {
    // MobileProtectionShield is now available
}, false);

Get Secrets​

Secret values are only available if the device is deemed as "not compromised". In any other case there might not be an error but the returned values are not the real secret value.

MobileProtectionShield.(iOS|Android).get<Key> ({
    (value) => { /* Success, handle the secret value */ },
    (error) => { /* Failure, handle the error */ }
});

Security Verifications (iOS)​

//The returned code can be used to exactly detect why the device is compromised.
MobileProtectionShield.iOS.getValidationCode(
    (code) => {},
    (error) => {}
);

MobileProtectionShield.iOS.isBeingReverseEngineered(
    (isBeingReverseEngineered) => {},
    (error) => {}
);

MobileProtectionShield.iOS.isJailbroken(
    (isJailbroken) => {},
    (error) => {}
);

MobileProtectionShield.iOS.isBlockingSimulator(
    (isJailbroken) => {},
    (error) => {}
);

Security Verifications (Android)​

MobileProtectionShield.Android.isDebugger(
    (isDebugger) => {},
    (error) => {}
);

MobileProtectionShield.Android.isEmulator(
    (isEmulator) => {},
    (error) => {}
);

MobileProtectionShield.Android.isDebugger(
    (isDebugger) => {},
    (error) => {}
);

MobileProtectionShield.Android.isFrida(
    (isFrida) => {},
    (error) => {}
);

MobileProtectionShield.Android.isInstallerAllowed(
    (isInstallerAllowed) => {},
    (error) => {}
);

MobileProtectionShield.Android.isKeystoreSigned(
    (isKeystoreSigned) => {},
    (error) => {}
);

MobileProtectionShield.Android.isMagisk(
    (isMagisk) => {},
    (error) => {}
);

MobileProtectionShield.Android.isRooted(
    (isRooted) => {},
    (error) => {}
);

Client specifics​

Because not all projects contain the same secret key/value pairs it's important to map the JavaScript calls to the native code implementations. For that there are 2 files that need to me changed for each platform.
Note: www/*.js work as a "syntax sugar" and can be removed.

iOS​

  • dependencies/MobileProtectionShield.xcframework
  • src/ios/MobileProtectionShieldBridge.swift
  • www/MobileProtectionShield.ios.js

Android​

  • dependencies/MobileProtectionShield.aar
  • src/android/MobileProtectionShieldBridge.java
  • www/MobileProtectionShield.android.js