com.braintreepayments.api.internal

Class SignatureVerification

java.lang.Object

com.braintreepayments.api.internal.SignatureVerification

public class SignatureVerification
extends java.lang.Object

Constructor Summary

Constructors

Constructor and Description
SignatureVerification()

Method Summary

Modifier and Type	Method and Description
static boolean	isSignatureValid(android.content.Context context, java.lang.String packageName, java.lang.String certificateSubject, java.lang.String certificateIssuer, int publicKeyHashCode) Check if an app has the correct, matching, signature.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SignatureVerification

public SignatureVerification()

Method Detail

isSignatureValid

public static boolean isSignatureValid(android.content.Context context,
                                       java.lang.String packageName,
                                       java.lang.String certificateSubject,
                                       java.lang.String certificateIssuer,
                                       int publicKeyHashCode)

Check if an app has the correct, matching, signature. Used to prevent malicious apps from impersonating other apps.

Parameters:

context -

packageName - the package name of the app to verify.

certificateSubject - the expected certificate subject of the app.

certificateIssuer - the expected certificate issuer of the app.

publicKeyHashCode - the hash code of the app's public key.

Returns:

true is signature is valid or signature verification has been disabled.