mirrors/bitwarden-android
1
0
Fork 0
mirror of https://github.com/bitwarden/android.git synced 2024-10-31 07:05:35 +03:00
Code Issues Projects Releases Packages Wiki Activity

Use array to define knownCerts for authenticator bridge permission (#4103)

Browse source
This commit is contained in:
Andrew Haisting 2024-10-21 13:47:40 -05:00 committed by GitHub
parent 36a718753d
commit d1f13e49a4
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
4 changed files with 20 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/src/beta/res/values/manifest.xml
View file

@ -5,5 +5,5 @@
AuthenticatorBridgeService in the beta variant. If later another variant of the
Bitwarden Authenticator app is added, a SHA-256 digest of that variant's APK can be added here.
-->
<string name="known_authenticator_app_cert">@null</string>
<string-array name="known_authenticator_app_certs" />
</resources>

6
app/src/debug/res/values/manifest.xml
View file

@ -1,5 +1,7 @@
<?xml version="1.0" encoding="utf-8"?>
<resources>
<!-- This is the SHA-256 digest for the Authenticator App debug variant:-->
<string name="known_authenticator_app_cert">13144ab52af797a88c2fe292674461ef1715e0e1e4f5f538f63f1c174696f476</string>
<string-array name="known_authenticator_app_certs">
<!-- This is the SHA-256 digest for the Authenticator App debug variant:-->
<item>13144ab52af797a88c2fe292674461ef1715e0e1e4f5f538f63f1c174696f476</item>
</string-array>
</resources>

2
app/src/main/AndroidManifest.xml
View file

@ -25,7 +25,7 @@
app. -->
<permission
android:name="${applicationId}.permission.AUTHENTICATOR_BRIDGE_SERVICE"
android:knownCerts="@string/known_authenticator_app_cert"
android:knownCerts="@array/known_authenticator_app_certs"
android:label="Bitwarden Bridge"
android:protectionLevel="signature|knownSigner"
tools:targetApi="s" />

17
app/src/release/res/values/manifest.xml
View file

@ -1,6 +1,17 @@
<?xml version="1.0" encoding="utf-8"?>
<resources>
<!-- This is the SHA-256 digest for Google Play signing key of the Authenticator App Release
variant: -->
<string name="known_authenticator_app_cert">45bd689eb1493eaef19c346dc1385197ddbb53ddc5d09476db4895df75b9b53b</string>
<string-array name="known_authenticator_app_certs">
<!-- This is the SHA-256 digest for Google Play signing key of the Authenticator App release
variant: -->
<item>45bd689eb1493eaef19c346dc1385197ddbb53ddc5d09476db4895df75b9b53b</item>
<!-- This is the SHA-256 digest for Firebase App Distribution signing key of the
Authenticator App release variant: -->
<item>B06B54566AF2FBCC762700C8844B84EC410C230EACC3878FCF0248C0D9772A95</item>
<!-- These are the SHA-256 digest for one-off builds created from branches by the Github
Action of the Authenticator App release variant. Uncomment this to one off builds generated
from the Authenticator App repo. -->
<!-- <item>52f393fb529fbf2ab5bb018bf17bf0f829d2fbebce099915aba42deab5a2fbb8</item>-->
</string-array>
</resources>