Feat(GiniMerchantSDK): Migrate to universal links

[motokotomax]

EC-89 migrate from URL Scheme to Universal Links

Highlights:

• need to deploy AASA file (for development needs https://beaver-d97a1.web.app/.well-known/apple-app-site-association) docs https://developer.apple.com/documentation/xcode/supporting-associated-domains
• still have to support URL Scheme for detecting clients/banking apps
• possible collision URLSheme implemented (app installed, and we suppose to open it), but Universal links not implemented (will be redirect to fallback URL, our flow breaks)
• harder to implement for clients
• potential risk (note from apple: Universal links offer a potential attack vector into your app, so make sure to validate all URL parameters and discard any malformed URLs. In addition, limit the available actions to those that don’t risk the user’s data. For example, don’t allow universal links to directly delete content or access sensitive information about the user. When testing your URL-handling code, make sure your test cases include improperly formatted URLs.) docs https://developer.apple.com/documentation/xcode/supporting-universal-links-in-your-app?language=objc

• can be used across platforms
• not deprecated

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[motokotomax]

Few guides to implement Universal Links:
https://developer.apple.com/documentation/xcode/supporting-universal-links-in-your-app?language=objc
https://chatableapps.com/technology/the-ultimate-guide-to-universal-link-implementation-in-ios-everything-you-need-to-know/
https://www.branch.io/resources/blog/how-to-setup-universal-links-to-deep-link-on-apple-ios/
https://www.mobot.io/blog/how-to-test-universal-links-on-ios

Example link to test current implementation:
https://beaver-d97a1.web.app/payment-requester?paymentRequestId=398bc920-8172-4258-a91e-f14361f4dba0

[razvancapra]

Nice job 👍 We only need the deployment of AASA file

[motokotomax]

AASA file should be named apple-app-site-association (without extension) and deployed to path ".well-known"

content of file

{ "applinks": { "apps": [], "details": [ { "appID": "JA825X8F7Z.net.gini.merchantsdk.example", "paths": [ "/payment-requester*", "/another/path/*"] } ] } }

apple-app-site-association.json