Flutter应用完整性验证插件 play_integrity_flutter 的使用

简介

play_integrity_flutter 是一个用于 Flutter 应用的插件，可以帮助开发者验证应用的完整性和安全性。该插件通过与 Google Play 的完整性 API 集成，提供了多种方法来检查应用是否被篡改或运行在不安全的环境中。

开始使用

安装

首先，在你的 pubspec.yaml 文件中添加 play_integrity_flutter 依赖：

dependencies:
  flutter:
    sdk: flutter
  play_integrity_flutter: ^0.0.1

然后运行 flutter pub get 来安装依赖。

导入插件

在你的 Dart 文件中导入 play_integrity_flutter 插件：

import 'package:play_integrity_flutter/play_integrity_flutter.dart';
import 'package:play_integrity_flutter/models/play_integrity_model.dart';

示例代码

以下是一个完整的示例代码，展示了如何使用 play_integrity_flutter 插件来验证应用的完整性：

import 'package:flutter/material.dart';
import 'dart:async';
import 'package:flutter/services.dart';
import 'package:play_integrity_flutter/models/play_integrity_model.dart';
import 'package:play_integrity_flutter/play_integrity_flutter.dart';
import 'package:play_integrity_flutter/play_integrity_flutter_platform_interface.dart';

void main() {
  runApp(const MyApp());
}

class MyApp extends StatefulWidget {
  const MyApp({super.key});

  @override
  State<MyApp> createState() => _MyAppState();
}

class _MyAppState extends State<MyApp> {
  String _platformVersion = 'Unknown';
  final _playIntegrityFlutterPlugin = PlayIntegrityFlutter();
  GooglePlayServicesAvailability? _gmsStatus;
  PlayIntegrity? _playIntegrity;

  @override
  void initState() {
    super.initState();
    initPlatformState();
    initGooglePlayServicesAvailability();
    initPlayIntegrity();
    initPlayIntegrityWithFormattedNonce();
  }

  Future<void> initPlayIntegrityWithFormattedNonce() async {
    PlayIntegrity? playIntegrity;
    Uint8List nonce = Uint8List(16);
    try {
      playIntegrity = await _playIntegrityFlutterPlugin.playIntegrityWithFormattedNoncePayload(
          nonce, 'decryptionKey', 'verificationKey');
    } on Exception {
      playIntegrity = null;
    }

    if (!mounted) return;

    setState(() {
      _playIntegrity = playIntegrity;
    });
  }

  Future<void> initPlayIntegrity() async {
    PlayIntegrity? playIntegrity;

    try {
      playIntegrity = await _playIntegrityFlutterPlugin.playIntegrityPayload(
          'nonce', 'decryptionKey', 'verificationKey');
    } on Exception {
      playIntegrity = null;
    }

    if (!mounted) return;

    setState(() {
      _playIntegrity = playIntegrity;
    });
  }

  Future<void> initGooglePlayServicesAvailability() async {
    GooglePlayServicesAvailability? gmsAvailability;
    try {
      gmsAvailability =
          await _playIntegrityFlutterPlugin.googlePlayServicesAvailability();
    } on PlatformException {
      gmsAvailability = null;
    }

    if (!mounted) return;

    setState(() {
      _gmsStatus = gmsAvailability;
    });
  }

  Future<void> initPlatformState() async {
    String platformVersion;
    try {
      platformVersion =
          await _playIntegrityFlutterPlugin.getPlatformVersion() ??
              'Unknown platform version';
    } on PlatformException {
      platformVersion = 'Failed to get platform version.';
    }

    if (!mounted) return;

    setState(() {
      _platformVersion = platformVersion;
    });
  }

  @override
  Widget build(BuildContext context) {
    return MaterialApp(
      home: Scaffold(
        appBar: AppBar(
          title: const Text('Plugin example app'),
        ),
        body: Center(
          child: Column(
            mainAxisAlignment: MainAxisAlignment.center,
            children: [
              Text('Running on: $_platformVersion\n'),
              Text('Google Play Services Availability: $_gmsStatus\n'),
              Text('Play Integrity: ${_playIntegrity?.toString()}\n'),
            ],
          ),
        ),
      ),
    );
  }
}

解释

1. 初始化插件：

   • 在 initState 方法中调用 initPlatformState、initGooglePlayServicesAvailability、initPlayIntegrity 和 initPlayIntegrityWithFormattedNonce 方法来初始化插件并获取相关信息。

2. 获取平台版本：

   • getPlatformVersion 方法用于获取当前平台的版本信息。

3. 检查 Google Play 服务可用性：

   • googlePlayServicesAvailability 方法用于检查 Google Play 服务是否可用。

4. 验证应用完整性：

   • playIntegrityPayload 方法用于生成并验证应用完整性令牌。
   • playIntegrityWithFormattedNoncePayload 方法用于生成带有格式化随机数的完整性令牌。

5. 显示结果：

   • 在 build 方法中，将获取到的信息显示在界面上。

通过以上步骤，你可以轻松地在 Flutter 应用中集成 play_integrity_flutter 插件，确保应用的安全性和完整性。