If you are test-driving Approov, you can also start with an example shapes app, shapes_axios, shapes_fetch, and shapes_frisbee, which work with the publicly available shapes API and service at shapes.approov.io.
2. Integrate Approov
The full quickstart is supplied as an npm package and is integrated into the standard React Native command line tooling.
A quickstart check command verifies your app is ready for integration or reports any issues and provides suggested fixes. Typical issues include a missing Android network permission or an out-of-date iOS deployment target.
Next, an integrate command adds the latest Approov SDK into your app and integrates app attestation functionality and Approov protection into your API calls. The command asks a few questions if you want to customize header names or add features such as binding user and Approov authentication.
Now just build and run your app as usual with the react-native CLI:
$ yarn run react-native run-android
$ yarn run react-native run-ios
If you wish, you can also rerun the check command to ensure that Approov is now properly integrated.
3. Register your app with Approov
The remaining step is to register your app with the Approov service. For your convenience, registration commands are added into to the React-Native CLI:
$ yarn run react-native reg-android
$ yarn run react-native reg-ios
By default, your app is registered for one hour for debug and testing.
Continue developing your app, coordinate Approov protection with your service implementation, and when ready, just follow your normal deployment flow and register your production Android and iOS apps with Approov.
Once your app is integrated, all Approov features, such as updating security policies, adding APIs, customizing certificate pinning, testing support, live metrics, and more, are available through the approov CLI as usual.