Developer Libraries » Trusted Intents

remove gpg signing from ant build, its in ./make-release-build now

fix getIntentFromTrustedSender() to actually use the sending packageName

It was getting the recipient's packageName, not the sender's. The Intent
does not include the sender's packageName, that has to be fetched using
Activity.getCallingActivity().

Thanks to @grote for finding this.

make getIntentFromTrustedSender return null if anything goes wrong

Instead of throwing an Exception, just return null. That makes this behave
more like Activity.getIntent() and the related patterns.

add example app

Includes this as the app icon:
https://commons.wikimedia.org/wiki/File:Geogebra.svg

exclude generated BuildConfig from jar, its unneeded and conflicts

do not include timestamp in javadoc to aid reproducibility

fix warnings in javadoc

setup-ant: find ANDROID_HOME and Android SDK target

document how LGPL works with Java

implement TrustedIntents.getIntentFromTrustedSender() instance method

The idea is to mimic Activity.getIntent(), but check that the Intent is
from a packageName that is trusted. The difference from getIntent() is
that this one throws Exceptions that must be caught.

add basic test of sending Intents with package/ComponentName set

This actually runs the Intent through startActivity(), so that method is
provided by ActivityUnitTestCase so it might not actually do anything.

tests: use list of actually installed packages for tests

The tests includes lists of possible package names, now this creates a list
from those lists of the packages that are actually installed. That will
make the tests run reliably on various devices and emulators.

tests: get TrustedIntents instance in setUp()

Most of the tests need an instance, and it should be cleared each time.

test that addTrustedSigner() will not accept ApkSignaturePin.class

isReceiverTrusted() and isIntentSane() check getComponent() for packageName

The packageName can be set with setPackage(), setClassName() or setClass().

• getPackage() returns what is set by setPackage()
• getComponent() returns what is set by setClassName() and setClass()

make addTrustedSigner's argument a Class rather than ApkSignaturePin

There is no sense in anyone instantiating the class since it is in effect a
singleton, and the only instance methods are for validating that the
certificate matches the fingerprint. Using a Class as an argument mirrors...

make startActivity() handle both setPackage() and setClassName()

An Intent can be targeted using both setPackage() and setClassName().
setPackage() narrows down the possible recipients to a given packageName,
while setClassName() set the specific Activity in an app to send to. The...

include pin: Guardian Project RSA 4096-bit signing key

setup-ant: use a CURDIR variable

add script for Jenkins build

Having everything in a script makes it easier to maintain. Jenkins then
runs the ant commands itself.

add `ant javadoc` to generate javadoc for FDroid sources

link to trusted intents blog post in README

isReceiverTrusted() for checking an Intent before calling startActivity()

Set up APK signature pins using addTrustedSigner() then check Intents using
checkTrustedSigner() before using them in startActivity()/etc. This is the
first model for how to check that the Intent is going to the right receiver

add tests for signature equality method

added android test project skeleton

project skeleton