&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/Creative-for-SSL.webp" alt="M2P Fintech" title="" width="100%" height="253">Welcome to our latest blog, where we dive into the critical security technique known as SSL Pinning. This method plays a pivotal role in thwarting eavesdropping attacks on the communication between an app and its server.SSL Pinning involves a process where, after the initial exchange of encryption keys, the app verifies the validity of the server's certificate. It achieves this by maintaining a list of trusted certificates on the device itself, which are then compared to the server's certificate in real time as the app operates.&nbsp;If there is a discrepancy, indicating that the server's certificate does not align with the trusted ones, the app promptly halts the connection.&nbsp;Types of SSL Pinning:<ul class="list-node" id="c5h0hkum0"><li>SSL Pinning using Certificate: This method has the drawback that we must update the app each time the pinned certificate expires. However, by anchoring upcoming certificates in the application, this problem may be resolved. We may use the hashed public key, which won't change for subsequent certifications, rather than pinning the entire certificate.&nbsp;</li></ul><ul class="list-node" id="8d24u2471"><li>SSL Pinning using server Public key:&nbsp;This method includes attaching the certificate's public key (certificate expiration need not be a concern here).</li></ul>Mobile applications must retrieve data from the server to display it to consumers. However, private data, such as the user's login and password, is occasionally transmitted between the program and the server. SSL Pinning is mainly used in the prevention of man-in-the-middle attacks.Man-In-The-Middle Attack &nbsp;This type of attack allows the attacker to covertly view data passed from the client to the server by using a specialized server called an SSL proxy. It is a tool that encrypts and decrypts data between the client and the server using different keys for each direction. Charles, a proxy server used for testing, is one such example. It works in several phases to intercept and analyze the data between the app and the server.  By sitting between the app and the internet, it allows you to examine and modify data in real-time to test the response of the application.&nbsp;<ol class="list-node" id="xyrs1alxr"><li>Instead of using the server's key to encrypt data, your app utilizes the public key of the Charles ProxyCertificate. The Charles Certificate is considered valid because the developer can install it on their device.&nbsp;</li><li><a class="link" href="https://www.kodeco.com/21931256-charles-proxy-tutorial-for-ios">Charles</a> may connect to the server using its public key after using its private key to decode all the data. Be aware that any developer can read all the data that your app sends over the network. &nbsp;</li></ol>SSL Pinning using Public Key &nbsp;<ul class="list-node" id="r0h4qy5p1"><li>Get public certificates using OpenSSL by typing a command in the terminal/console to get the PEM key. &nbsp;</li></ul>echo "Get HTTP/1.0" | openssl s_client -showcerts -connectwww.MyDomainName.com:443 &gt; myPemCertificateName.pem &nbsp;<ul class="list-node" id="93uejjeug"><li>Type this command to turn the created PEM key into .der format.</li></ul>openssl x509 -in "myPemFileName.pem" -inform PEM -out "myDerFileName.der" -outform DER &nbsp;<ul class="list-node" id="62sgzhr0g"><li>Use this command to get the public key from the URL in SHA256 format. &nbsp;</li></ul>openssl s_client -connect www.MyDomainName.com:443 | openssl x509 -pubkey -noout | openssl rsa -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64 &nbsp;<ul class="list-node" id="bos2d0jr8"><li>443 is the safe port for HTTPS. If your website uses a different port, use that number instead of 443. &nbsp;</li><li>The result should look like this. &nbsp;</li></ul>A3r26k+KOMuKJHB5B67cpGqqPhF/GNUyNl2EPJKB65KJUe+hXMn1k= &nbsp;<ul class="list-node" id="munqf5sov"><li>Generate the Hash Key using this <a class="link" href="https://www.ssllabs.com/ssltest/">link</a> as well. &nbsp;</li></ul><ul class="list-node" id="a5wc1jmum"><li>Create a variable to store the Public key that we get from the certificate. &nbsp;</li></ul>static let sslPublicKey ="A3r26k+KOMuKJHB5B67cpGqqPhF/GNUyN2EPJKB6KJUe+hXMn1k=" &nbsp;Pinning with Alamofire &nbsp;<ul class="list-node" id="vlgnafls0"><li>Using the regular API can be complicated. Using Alamofire is recommended because it is an external library that offers a simpler way to work with APIs, making your life easier. &nbsp;</li><li>The ServerTrustEvaluating protocol is the foundation of everything. It allows us to evaluate server trust in various ways. Alamofire has several trust evaluators. You can read the full documentation <a class="link" href="https://github.com/Alamofire/Alamofire/blob/master/Documentation/AdvancedUsage.md#security">here</a>. &nbsp;</li><li>Select the ServerTrustEvaluator for each API. &nbsp;</li></ul> <img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/ss1.webp" alt="M2P Fintech" title="" width="100%" height="138"><ul class="list-node" id="7fgyhm915"><li>Then create a session with them, and you can customize your configuration. &nbsp;</li></ul> <img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/ss2.webp" alt="M2P Fintech" title="" width="100%" height="88"><ul class="list-node" id="p64ip70za"><li>rsa2048Asn1Header is a list of whole numbers that shows the algorithm and any additional information used with the public key. &nbsp;</li><li>This private func sha256(data: Data) -&gt; String function creates a coded hash using the sha256 method for the given data and encodes it in base64. &nbsp;</li><li>import CommonCrypto for sha256 algorithm &nbsp;</li><li>In SessionDelegate, the URLAuthenticationChallenge method is used to get ServerPublicKeyData &nbsp;</li></ul> <img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/ss3.webp" alt="M2P Fintech" title="" width="100%" height="44"><ul class="list-node" id="0b7oumb7i"><li>We can perform some actions using this delegate method and match our Public Key with Server Public Key. &nbsp;</li></ul> <img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2024/03/ss4.webp" alt="M2P Fintech" title="" width="100%" height="569">Implementing SSL pinning using a public key in iOS enhances security by ensuring that only trusted servers with specific public keys can establish connections. This method mitigates the risks associated with man-in-the-middle attacks and unauthorized access to sensitive data, providing users with a more secure experience.Stay tuned for more blogs on tech, engineering, and iOS development.&nbsp;This blog is written by <a class="link" href="https://teams.microsoft.com/l/message/19:2ef83816-29e0-4b52-8caa-64b0aeca1ec1_dd9ec8f1-8445-4b0a-92af-aa769014f3db@unq.gbl.spaces/1709882415989?context=%7B%22contextType%22%3A%22chat%22%7D">Senthilkumar</a>, SDE 2 – Product Engineering at M2P.

Setting up SSL Pinning using Public Key in Swift

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/Android-SDK-Integration-Blog-Banner-Design-01-2.webp" alt="M2P Fintech" title="" id="8wwgsm7pp" width="100%" height="358">Flutter combines the best features from native and hybrid application development approaches.&nbsp; Instead of developing separate apps for platforms such as Android, iOS, Windows, and Linux, Flutter allows developers to build once and deploy across multiple platforms.&nbsp; But how can developers tap into native platform features and integrate robust SDKs?&nbsp; Enter the Method Channel Method Channel acts as a powerful communication mechanism between Flutter and the native platform, opening a world of possibilities for an app. By leveraging the Method Channel, a developer can seamlessly integrate iOS and Android SDKs into their Flutter project, unlocking new functionalities and expanding their app's potential.&nbsp; In this blog, our developer <a class="link" href="https://www.linkedin.com/in/alwin-s-699a47145/">Alwinraj Sahayaraj </a>delves into the exciting world of SDK integration in Flutter using Method Channels. He will guide you through the process of integrating SDKs, accessing native functionalities, and creating a seamless bridge between Flutter and the native platform.&nbsp; Let's start with what an SDK is.&nbsp;<h2 class="heading-node" id="q0pkxgv2y" style="text-align: justify">What is SDK?&nbsp;</h2>Software Development Kit (SDK) or devkit is a set of software tools and programs that developers use to create applications for specific platforms.&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/Android-SDK-Integration-Blog-Banner-Design-05.webp" alt="M2P Fintech" title="" width="100%" height="348">SDK is like a magical toolbox that comprises everything a developer needs to bring their app ideas to life on a particular platform. This toolbox includes libraries, documentation, code samples, processes, and guides that developers can use and integrate into their own apps.&nbsp;&nbsp; SDKs are created to be used for particular platforms or programming languages.&nbsp; When developing an Android application, you would require an Android SDK toolkit, while an iOS SDK would be necessary for building an iOS app. &nbsp; Similarly, a VMware SDK would be essential if you intend to integrate with the VMware platform. Likewise, a Nordic SDK would be the appropriate choice for developing bluetooth or wireless products. The specificity of SDKs ensures developers have the tools tailored to their intended platform or technology.&nbsp; Now, let’s see how SDK is integrated into Flutter.&nbsp;&nbsp;<h2 class="heading-node" id="3jyfvdfuq" style="text-align: justify">SDK Integration into Flutter&nbsp;</h2>SDK integration in Flutter involves integrating external development kits into your Flutter project. These SDKs are pre-built libraries or tools offering additional features or services not native to the Flutter framework. &nbsp; They are developed in different programming languages like Dart, Swift, Objective-C, Java, or Kotlin. Incorporating these SDKs into your Flutter project allows you to access extended functionality and leverage existing libraries and tools to enhance your app development process.&nbsp; SDK integration enables you to create a feature-rich, dynamic, and user-friendly app. Built on multiple programming languages, they are compatible with different platforms.&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/Android-SDK-Integration-Blog-Banner-Design-04-1.webp" alt="M2P Fintech" title="" width="100%" height="358">SDK integration in Flutter enables developers to leverage native platform features, tap into third-party services, and extend the capabilities of their applications. It empowers developers to improve user experience and accelerate the development process by leveraging the power of tailored SDKs.&nbsp; Some everyday use cases of SDK integration in Flutter include the following.&nbsp;<h3 class="heading-node" id="1rl0ilk7q" style="text-align: justify">Native Functionality Interaction&nbsp;</h3>Flutter offers a robust platform channel mechanism that facilitates seamless communication between Flutter and the native iOS or Android platform. By integrating SDKs, developers can interact with device-specific functionalities like the camera, GPS, sensors, Bluetooth, and other native APIs.&nbsp;<h3 class="heading-node" id="gvkzzp708" style="text-align: justify">Third-Party Service Access&nbsp;</h3>Numerous SDKs provide consistent integrations with widely used third-party services, including analytic platforms, push notification services, authentication providers, payment gateways, and social media networks. By integrating these SDKs into your Flutter app, you can effortlessly incorporate these essential services, enabling features such as user analytics, real-time notifications, secure authentication, streamlined payments, and seamless social media integration.&nbsp;<h3 class="heading-node" id="dbnbidppe" style="text-align: justify">Readymade UI Components&nbsp;&nbsp;</h3>Specific SDKs offer ready-made UI components that can be integrated into your Flutter app, saving valuable time and effort. These pre-built components enable you to swiftly achieve desired designs or functionalities without creating them from scratch. By leveraging these UI components, you can expedite the development process, enhance the visual appeal of your app, and ensure consistency across different screens and interactions.&nbsp;<h3 class="heading-node" id="diq0c199q" style="text-align: justify">Optimize Performance&nbsp;&nbsp;</h3>SDK integration geared towards performance optimization can significantly boost the overall performance, reduce network usage or improve the overall rendering efficiency of your app. You can optimize various aspects of your app's functionality by integrating performance-focused SDKs, such as image processing libraries, networking libraries, or caching mechanisms.&nbsp;<h3 class="heading-node" id="wywpa3xti" style="text-align: justify">Monetization Opportunities&nbsp;&nbsp;</h3>SDK integration with advertising networks or in-app monetization platforms offers a seamless solution to incorporate various monetization strategies into your app. By integrating these SDKs, you can display targeted ads, track important metrics such as ad impressions and revenue, and implement in-app purchases and subscriptions seamlessly.&nbsp; One of the most effective ways to achieve seamless SDK integration in Flutter is using Method Channels. &nbsp;<h2 class="heading-node" id="cesqxp4wy" style="text-align: justify">What is Method Channel &amp; how it is used in SDK integration?&nbsp;</h2>The Method Channel is like a virtual bridge that connects your Flutter app with the native platform, whether it's Android or iOS.&nbsp;&nbsp; Using the Method Channel, you can invoke platform-specific code from your Flutter app and receive the corresponding results. This bidirectional communication mechanism facilitates data exchange and functionality between Flutter and the native platform.&nbsp; &nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/Android-SDK-Integration-Blog-Banner-Design-06.webp" alt="M2P Fintech" title="" width="100%" height="360">Within the Flutter/services package, you'll find the Method Channel class, crucial in establishing a communication channel between your Flutter app and the native platform. This channel facilitates the invocation of methods and the handling of results, enabling seamless interaction between Flutter and the underlying native platform.&nbsp; Let's see how the code is integrated into Flutter. To integrate SDKs using Method Channels in Flutter, there are a few steps to be followed on both the Flutter side and the native (Android and iOS) platform side.&nbsp;&nbsp; First, let’s see the flutter side.&nbsp;<h2 class="heading-node" id="iah66oac6" style="text-align: justify">Flutter&nbsp;</h2>To use the Method Channel in Flutter for SDK integration, here is the fundamental structure for creating and invoking a Method Channel in Flutter and iOS.&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/MicrosoftTeams-image-15.webp" alt="M2P Fintech" title="" width="100%" height="508"><h2 class="heading-node" id="v9wvbfq7n" style="text-align: justify">Native (Android + iOS)</h2>On the native side (iOS), specifically inside the AppDelegate file, you would typically implement the Method Channel functionality. This is where you handle method invocations from the Flutter app and establish communication between Flutter and the iOS platform.&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/MicrosoftTeams-image-18.webp" alt="M2P Fintech" title="" width="100%" height="1422">The following is the basic structure for creating and invoking a Method Channel in Flutter and iOS:&nbsp;<h2 class="heading-node" id="oo9beyl71" style="text-align: justify">Android&nbsp;</h2>On the Android native side (MainActivity.kt), you can set up the Method Channel.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/MicrosoftTeams-image-20.webp" alt="M2P Fintech" title="" width="100%" height="84">To integrate the SDK on the Android side, you need to perform the following steps:&nbsp; Step 1: Add the AAR file to your project: Navigate to the project directory: Project → android → app → lib (create the "lib" directory if it doesn't exist).&nbsp; Place the AAR file inside the "lib" directory&nbsp; Step 2: Modify the build.gradle file (app level):&nbsp; Open the build.gradle file located at: Project → android → app → build.gradle.&nbsp; Step 3:&nbsp; And need to add the required dependencies for SDK integration (mentioned in the SDK documents)&nbsp;<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/MicrosoftTeams-image-16.webp" alt="M2P Fintech" title="" width="100%" height="731">You will need to do the following to incorporate this functionality into your Flutter app.&nbsp; Step 1: Review the SDK Integration Document provided by the SDK developer before proceeding with the implementation. This document contains essential information and instructions on how to integrate the SDK into your application effectively.&nbsp; Step 2: If the SDK Integration Document specifies any required API calls and data retrieval, it is essential to follow those instructions. These API calls will enable you to fetch the necessary data to be passed as arguments to the SDK integration scenario.&nbsp; Step 3: To pass values from Flutter to iOS after retrieving them via an API call, you need to write an API call function in Flutter. This function will make the necessary HTTP requests and fetch the required data. Once the data is obtained, you can pass it as arguments to the SDK integration in Flutter. These arguments will be subsequently sent from Flutter to the iOS platform.&nbsp; By following these steps and carefully reviewing the SDK Integration Document, you can successfully incorporate the required API calls and data retrieval processes into your Flutter app, ensuring smooth integration with the SDK.&nbsp; So, whether you're a seasoned developer or just starting your Flutter journey, don't hesitate to explore the vast world of SDKs and the Method Channel.&nbsp;&nbsp; Happy Coding and Integrating&nbsp; Do you have any questions or suggestions?&nbsp; Write to us at <a class="link" href="mailto:business@m2pfintech.com">business@m2pfintech.com</a>. Our expert team will be happy to assist you.&nbsp; <a class="link fui-Link ___1idfs5o f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1hu3pq6 f11qmguv f19f4twv f1tyq0we f1g0x7ka fhxju0i f1qch9an f1cnd47f fqv5qza f1vmzxwi f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh ftqa4ok f2hkw1w fhgqx19 f1olyrje f1p93eir f1h8hb77 f1x7u7e9 f10aw75t fsle3fq f17ae5zn" href="https://m2pfintech.com/newsletter/" target="_blank" rel="noreferrer noopener">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox. Follow us on&nbsp;<a class="link fui-Link ___1idfs5o f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1hu3pq6 f11qmguv f19f4twv f1tyq0we f1g0x7ka fhxju0i f1qch9an f1cnd47f fqv5qza f1vmzxwi f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh ftqa4ok f2hkw1w fhgqx19 f1olyrje f1p93eir f1h8hb77 f1x7u7e9 f10aw75t fsle3fq f17ae5zn" href="https://www.linkedin.com/company/m2pfintech/mycompany/" target="_blank" rel="noreferrer noopener">LinkedIn</a>&nbsp;and&nbsp;<a class="link fui-Link ___1idfs5o f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1hu3pq6 f11qmguv f19f4twv f1tyq0we f1g0x7ka fhxju0i f1qch9an f1cnd47f fqv5qza f1vmzxwi f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh ftqa4ok f2hkw1w fhgqx19 f1olyrje f1p93eir f1h8hb77 f1x7u7e9 f10aw75t fsle3fq f17ae5zn" href="https://twitter.com/m2pfintech" target="_blank" rel="noreferrer noopener">Twitter</a> for insightful fintech bytes curated for curious minds like you.

Power up Flutter with SDK Integration using Method Channel

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/CI-CD-Banner-1.webp" alt="M2P Fintech" title="" width="100%" height="253">Fixing a critical bug in your code can save the integrity of your project.&nbsp;&nbsp;What is equally important is continuously improving the quality of the code, testing, and automating it for new release. Developers must make sure they follow all these processes while seamlessly communicating the changes with their team members.&nbsp;&nbsp;That’s why development teams across the world practice a mechanism called Continuous Integration (CI) and Continuous Delivery (CD).&nbsp;Starting from generating a build using command line, uploading build to test flight using fast lane, interfacing Jenkins with bitbucket and Fastlane, CICD mechanism can simplify and automate the process of build generation for iOS developers.&nbsp;We are coming up with a 3-part series covering the A-Z of deploying CI/CD mechanism for automating build generation.&nbsp;&nbsp;In this blog, we will be talking about generating a local build using command line.&nbsp;Let’s dive in.&nbsp;This blog is written by <a class="link" href="https://www.linkedin.com/in/ranjith-ravichandran-73829793/">Ranjith Ravichandran</a>, Senior SDE, Product Engineering at M2P.&nbsp;<h2 class="heading-node" id="vixdomkir" style="text-align: justify">What is CI/CD?&nbsp;</h2>Continuous Integration is the practice of merging code changes to a shared repository many times a day. It includes automated building generation and testing. &nbsp;Continuous Delivery is continuous integration with additional processes which allows application release to the customers after each change or update. &nbsp;&nbsp;<h2 class="heading-node" id="gf7yuvxyf" style="text-align: justify">Why CI/CD?&nbsp;</h2>Continuous integration and continuous delivery (CI/CD) is a critical component of agile software development, which emphasizes the importance of delivering working software to users quickly and frequently. This allows stakeholders and users to access newly created features and provide feedback as soon as possible, so features can be iteratively improved.&nbsp;CI/CD is a valuable tool for software developers, regardless of the size of their team. For solo developers, CD may be even more important, as it can help to ensure that software is delivered to users quickly and reliably.&nbsp;In this blog, we will show you the behind the scenes of building, testing, archiving, and uploading an iOS application. Being aware of the native Apple developer tools and learning command line interaction is integral for anyone using CI/CD mechanism.&nbsp;Command line interactions can help you with the following.&nbsp;<ul class="list-node" id="pte7t3cwf"><li>Understanding apple technologies used for building and deploying an iOS application&nbsp;</li><li>Automating iOS development task for continuous integration or cloud-based servers&nbsp;</li><li>Understanding the background working of tools like <a class="link" href="https://fastlane.tools/">Fastlane</a>&nbsp;</li></ul><h2 class="heading-node" id="k829yqqxm" style="text-align: justify">Automating Build Generation – Overall Process</h2><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/CI-CD-img1.webp" alt="M2P Fintech" title="" width="100%" height="253"><ul class="list-node" id="2rh1i4is1"><li>Setting up the project and creating a repository in Bit Bucket&nbsp;</li><li>Connecting local Jenkins with Bit Bucket cloud to check out as project branch (to build as an IPA)&nbsp;</li><li>Connecting Jenkins and Fastlane for building and archiving the project</li><li>Moving the archived IPA to TestFlight from Fastlane</li></ul><h2 class="heading-node" id="718gbf2sl" style="text-align: justify">Build Generation using Command Line</h2><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/CI-CD-img2.webp" alt="M2P Fintech" title="" width="100%" height="261">Let’s assume that a project is developed by multiple engineers where they all must perform the following.&nbsp;<ul class="list-node" id="8xgwyb9oq"><li>Checking out the project from Bit Bucket to local system&nbsp;</li><li>Archiving the particular branch of the project using command line&nbsp;</li></ul>After following the above processes, the IPA is generated inside the project folder.&nbsp; To understand the command line deployment process, we should have the following things set up in advance before starting the build generation. &nbsp;<h2 class="heading-node" id="wl1vjw4rj" style="text-align: justify">Pre-requisites</h2><ul class="list-node" id="zxps2bfin"><li>Sample app with Xcode workspace - e.g., FintechBase.xcworkspace &nbsp;</li><li>Xcode Scheme with Release configuration - e.g., Developement &nbsp;</li></ul><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/MicrosoftTeams-image-3.webp" alt="M2P Fintech" title="" width="100%" height="270"><ul class="list-node" id="yyqu3ol0l"><li>Certificates, AppID, Provisioning profiles setup for production in iTunes Connect - Use <a class="link" href="https://help.apple.com/xcode/mac/current/#/dev60b6fbbc7">Apple’s documentation</a> for setting up&nbsp;</li><li>macOS with Distribution certificate in the keychain &nbsp;</li></ul><h3 class="heading-node" id="8sncc4746" style="text-align: justify">Analyzing &nbsp;</h3>We perform static analysis of the source code. The xcodebuild has the ability to clean and analyze the source code for any common syntax errors. &nbsp;<h3 class="heading-node" id="ceoujw6ub" style="text-align: justify">Code for analyzing the project using the terminal&nbsp;&nbsp;</h3>xcodebuild - workspace FintechBase.xcworkspace -scheme Development -sdkiphonesimulator10.3 clean analyze &nbsp;<h3 class="heading-node" id="kfx4bsyjr" style="text-align: justify">Building &nbsp; &nbsp;</h3>We can build an iOS app using xcodebuild ‘build’ action which can generate the derived data for our iOS app. Once the application is built, it can run inside the simulator or can be used by the test bundle. &nbsp;<h3 class="heading-node" id="2l3qqcg9r" style="text-align: justify">Build for running &nbsp;</h3>We can simply build our app to run inside simulators by using the command &nbsp;xcodebuild -workspace FintechBase.xcworkspace -scheme Development -configuration Release -allowProvisioningUpdates build &nbsp;<h3 class="heading-node" id="qpt6jm8bp" style="text-align: justify"> Archiving </h3>Most of the iOS engineers face difficulties in archiving an iOS application as it deals with provisioning profiles, certificates, and build configurations.&nbsp;To upload an app to iTunes Connect or deploy it on to the provisioned devices, we need to build an app for generic iOS device destination as well as export it in the IPA format. &nbsp;Next step is building our application with release configuration scheme ‘Development’ with generic iOS device destination. &nbsp; &nbsp;There are two steps involved.&nbsp;<ul class="list-node" id="lt01qgpu1"><li>Building an archive with xcodebuild archive &nbsp;</li><li>Creating the .ipa file with xcodebuild -exportArchive &nbsp;</li></ul><h4 class="heading-node" id="uimw8zxqa" style="text-align: justify">Without Team ID &nbsp;</h4>xcodebuild archive -workspace FintechBase.xcworkspace -scheme Development clean build archive  -archivePath ./build/FintechBase.xcarchive &nbsp;<h4 class="heading-node" id="lw00yqpeu" style="text-align: justify">With Team ID &nbsp;</h4>xcodebuild archive -workspace FintechBase.xcworkspace -scheme Development DEVELOPMENT_TEAM="XXXXXXXXXX" -allowProvisioningUpdates  -archivePath ./build/FintechBase.xcarchive &nbsp;<h4 class="heading-node" id="b1r52lons" style="text-align: justify">Note&nbsp;</h4><ul class="list-node" id="r267dseji"><li>The build is created using the above command build/FintechBase.xcarchive&nbsp;</li><li>Replace ‘XXXXXXXXX’ with your team ID&nbsp;</li></ul>We now export the .ipa using the command&nbsp;xcodebuild -exportArchive -allowProvisioningUpdates -archivePath  ./build/FintechBase.xcarchive -exportPath ./build/ -exportOptionsPlist ./build/ExportOptions.plist &nbsp;Note that the above command requires a ExportOptions argument that points to a .plist file with export options. For a complete list of what you can put in that plist, run xcodebuild -help.&nbsp;&nbsp;Create build folder in a project and add ExportOptions.plist<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/MicrosoftTeams-image-1-1.webp" alt="M2P Fintech" title="" width="100%" height="530"><h4 class="heading-node" id="q4fzt0obs" style="text-align: justify">Find the sample code for ExportOptions</h4><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2023/06/MicrosoftTeams-image-2-1.webp" alt="M2P Fintech" title="" width="100%" height="199">&lt;?xml version="1.0" encoding="UTF-8"?&gt; &nbsp;&lt;!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN""<a class="link" href="http://www.apple.com/DTDs/PropertyList-1.0.dtd">http://www.apple.com/DTDs/PropertyList-1.0.dtd</a>"&gt; &nbsp;&lt;plist version="1.0"&gt; &nbsp;&lt;dict&gt; &nbsp;&lt;key&gt;generateAppStoreInformation&lt;/key&gt; &nbsp;&lt;false/&gt; &nbsp;&lt;key&gt;manageAppVersionAndBuildNumber&lt;/key&gt; &nbsp;&lt;true/&gt; &nbsp;&lt;key&gt;method&lt;/key&gt; &nbsp;&lt;string&gt;app-store&lt;/string&gt; &nbsp;&lt;key&gt;signingStyle&lt;/key&gt; &nbsp;&lt;string&gt;automatic&lt;/string&gt; &nbsp;&lt;key&gt;stripSwiftSymbols&lt;/key&gt; &nbsp;&lt;true/&gt; &nbsp;&lt;key&gt;teamID&lt;/key&gt; &nbsp;&lt;string&gt;XXXXXXXXXX&lt;/string&gt; &nbsp;&lt;key&gt;uploadSymbols&lt;/key&gt; &nbsp;&lt;true/&gt; &nbsp;&lt;/dict&gt; &nbsp;&lt;/plist&gt; &nbsp; &nbsp;<h4 class="heading-node" id="ga13psli6" style="text-align: justify">Export Options</h4><ul class="list-node" id="kmyta6keu"><li>method: (String) The method of distribution, which can be set as any of the following: <ul class="list-node" id="vjjzjfgiv"><li>app-store &nbsp;</li><li>enterprise &nbsp;</li><li>ad-hoc </li><li>development &nbsp;</li></ul></li></ul><ul class="list-node" id="6jmqzfr7a"><li>teamID: (String) The development program team identifier. </li><li>signingtyle: (String) Automatic Signing “automatic”, incase of manual signing mention “manual” add provisioningProfiles and signingCertificate </li><li>uploadBitcode: (Boolean) Option to include Bitcode. </li><li>manageAppVersionAndBuildNumber: to ensure that you have already updated your version/build number before archiving</li><li>generateAppStoreInformation: For App Store exports, should Xcode generate App Store Information for uploading with iTMSTransporter. Defaults to NO </li><li>uploadSymbols: Should symbols be stripped from Swift libraries in your IPA. Defaults to YES</li></ul> &nbsp;After successfully running the command, the ipa file will be generated inside the build folder in the name of FintechBase.ipa&nbsp;The next step involves automating the build generation using Fastlane and pushing it to TestFlight which we will be covering in the next blog.&nbsp;Till then, Stay tuned!&nbsp;Have any questions/suggestions?&nbsp;&nbsp;&nbsp;Write to us at <a class="link" href="mailto:business@m2pfintech.com">business@m2pfintech.com</a>. Our expert team will get in touch with you.&nbsp;&nbsp;&nbsp;<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a> to our newsletter and get the latest fintech news, views, and insights, directly to your inbox.&nbsp;Follow us on <a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a> and <a class="link" href="https://twitter.com/m2pfintech">Twitter</a> for insightful fintech bytes curated for curious minds like you.&nbsp; &nbsp; &nbsp; &nbsp;&nbsp;

CI/CD Pipeline for iOS build generation using Jenkins

<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/06/Flutter-for-Fintech_Blog-banner_04.webp" alt="M2P Fintech" title="" width="100%" height="284">Fintech has transmuted banking and financial operations worldwide. It has radically simplified financial services and processes with the help of banking applications. Back in the day fintech applications were confined only to tech-savvy users, but today, it has become an integral part of life for all generations. The appetite for mobile-first, customized financial applications is driving fintech companies to innovate and consistently deliver advanced products and services.Banking applications are traditionally built for specific operating systems and <a class="link" href="https://m2pfintech.com/blog/api-the-power-that-drives-new-age-banking-ecosystems/">APIs</a> using the respective native programming languages/technologies. But these practices resulted in higher cost implications and prolonged time to market. To overcome such limitations, fintechs adopted the latest digital innovations to power personalization, user engagement, and security.The launch of Flutter in 2017 changed the dynamics of application development as it provided a great user experience tailored for specific operating systems. This unique feature made Flutter the holy grail of fintech app development. Over the last few years, several companies have successfully launched their applications using the Flutter framework.Curious to know how to add a flutter module to an existing android and iOS application?You’re in luck. We have our domain expert and Senior Software Engineer,&nbsp;<a class="link au lh" href="https://www.linkedin.com/in/chinnadurai-viswanathan-b2b6b7a5/" target="_blank" rel="noopener ugc nofollow">Chinnadurai Viswanathan</a>&nbsp;share the nitty-gritty of how Flutter can be used in fintech applications.Here are the topics he sheds light upon.<a class="link" href="#430e">What is Flutter?</a><a class="link" href="#d14a">Why Flutter is critical to Fintech?</a><a class="link" href="#fb14">How to Generate a Flutter Module?</a><a class="link" href="#69a3">Android Integrations</a><a class="link" href="#af8c">IOS Integrations</a>Here you go!<h2 class="heading-node" id="ag0mm47r9">What is Flutter?</h2>Flutter is an open-source software development kit from Google. It is used to build cross-platform applications, including mobile, web, and embedded products &amp; services. Programmers employing Flutter write a single codebase to create applications that run across various platforms such as android, iOS, Windows, and Linux. Developers build a Flutter app once and cross-compile them for multiple platforms with Flutter instead of creating an individual application for each platform.Let us be clear here that Flutter is not a programming language. It is a User Interface (UI) framework that works on the Dart programming language. It uses native UI elements which can be personalized during development. Some of the most used Flutter applications are Google Pay, Xianyu by Alibaba, and the KenKen puzzle app.<h2 class="heading-node" id="d14a">Why is Flutter critical to Fintech?</h2>Flutter combines the best features from native and hybrid application development approaches. Therefore, it is considered an optimal solution for neo banks and fintech companies. The Flutter framework offers manifold benefits to the user. But in this article, we emphasize the ones that are most essential for developing a fintech or mobile banking solution. Application and Data SecurityFlutter is powered by Dart and compiled into a native, computer-executable code. There are no intermediary apps required. This makes Flutter-based banking apps more secure than native solutions. Moreover, it also involves a comprehensive native library and changes data formats during compilation. So, the reverse engineering process is multifaceted, making it almost impossible for hackers to comprehend the software functionality to reproduce.Information security and compliance with regulations like <a class="link" href="https://m2pfintech.com/blog/pci-dss-the-payments-armour/">PCI DSS</a> and GDPR are imperative for a banking application. The framework allows biometric authentication via Face ID or Touch ID, and enables Dart developers to leverage the recently released library implementations of all popular data encryption algorithms. This boosts the security of the customers’ personal and financial data as well as transaction details.Reliable PerformanceAn application’s performance is directly proportional to customer engagement and retention rate. Delays in loading time significantly impact the product’s performance, which can make the customers stop using the application again.Flutter can offer up to 120 frames per second (FPS) performance, making it a top choice for banking apps that serve a colossal userbase with rapid response time.Use of Declarative APIFlutter harnesses reactive declarative UI <a class="link" href="https://m2pfintech.com/blog/api-the-power-that-drives-new-age-banking-ecosystems/">APIs</a>. This means Flutter’s user interface reflects the current state of the application. For example, if a user flips a switch in the settings screen, it triggers a redraw of the current state, and the UI rebuilds from scratch. This is the key advantage of Flutter.There is only one code path for any state of the user interface. The developer describes what the UI should be like, for any given state once, and that is it. The framework handles the arduous, error-prone task of optimizing the UI.Saves Time, Cost, and EffortUnlike native technologies, the Flutter framework presents a unique feature called the&nbsp;Hot Reload. It allows the developers to see the front-end and back-end changes in real-time. This enhances the product delivery speed as it saves a lot of time involved in developing and compiling a banking app. Additionally, Flutter offers a lot of widgets that help in simulating the behavior of various design languages, thus enabling the developers to jump some of the tedious steps in the application development.Furthermore, by using Flutter, developers write only one codebase for different operating systems. Thus multiple teams for each operating system is not required. This reduces the time and effort involved in testing bugs and potential issues. Furthermore, the use of a single codebase for different platforms drastically alleviates the maintenance process and, in turn, minimizes operational costs.Delivers Seamless User Experience and PerformanceReleasing new features and updates according to end-user feedback is the key to boosting customer engagement and retention. Flutter is flexible and has an in-built application builder. The developers can take advantage of a wide range of pre-developed, reusable UI elements to customize and fit customer needs and specifications. The apps built using this framework facilitate seamless user experience and superior performance.<h2 class="heading-node" id="fb14">How to Generate a Flutter Module?</h2>To create a flutter project, you require one of the following channels: beta, dev, or master. In case you are using the stable channel, change/ upgrade your channel before moving to the next step. Now, create a flutter module as shown in the below image.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/06/01.webp" alt="M2P Fintech" title="" width="100%" height="284">Upon clicking the finish button, a flutter module will be generated in the chosen folder.Now, using flutter design, you can make any design to meet your business requirements.Let us take the below design as an example<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com//m2p-website-file/marekting-cms/m2p-blog/2025/05/02.webp" alt="Flutter" title="" id="50luuo7xe" width="100%" height="284"><h2 class="heading-node" id="69a3">How to add Flutter to Android?</h2>We will first create a new Android Studio project.Step 1: Start&nbsp;Android Studio&nbsp;on your system.Step 2: Click on&nbsp;Start a new Android Studio projectStep 3: Choose&nbsp;Empty Activity/Whatever you need (Based on your business logic)&nbsp;and click&nbsp;Next.Step 4: Now enter the details for your&nbsp;native android projectStep 5: Click on the Finish buttonThere are two ways to implement the Flutter Module:(1) Using Android Archive (ARR)(2) Using Module’s source codeHere, we are using the Module’s source code as it facilitates a one-step build for the Android and Flutter projects. It is also convenient to work simultaneously on both parts; however, remember to install the Flutter SDK to build the host app.As the next step, add the Flutter module as a sub-project to the host app’s settings. Gradle file by adding the following commands:<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com//m2p-website-file/marekting-cms/m2p-blog/2025/05/03.webp" alt="Flutter" title="" id="t59nt5bbw" width="100%" height="171">Now, sync the Gradle by clicking on&nbsp;Sync Now&nbsp;button. Next, add more code and files to the host app to make it Flutter dependent.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com//m2p-website-file/marekting-cms/m2p-blog/2025/05/04.webp" alt="Flutter" title="" id="j0aitwyay" width="100%" height="199">Add a dependency to the&nbsp;app-level&nbsp;build. Gradle in your host app<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com//m2p-website-file/marekting-cms/m2p-blog/2025/05/05.webp" alt="Flutter" title="" id="ni6c8c7eu" width="100%" height="199">Finally, the Flutter Module is successfully added to the native Android Application.<h3 class="heading-node" id="1b69">Integrating Flutter Module with the Android app</h3>Follow the below steps to build the FlutterActivity class to display the Flutter screen within the host app.<ul class="list-node" id="lbr605y4h"><li>Use the&nbsp;withNewEngine()&nbsp;factory method to configure a&nbsp;FlutterActivity&nbsp;that internally creates its own&nbsp;FlutterEngine&nbsp;instance.</li><li>Followed by the&nbsp;initialRoute()&nbsp;factory method to define a custom route to display the Flutter UI, defined in the Flutter app code.</li><li>Finally, employ the&nbsp;build()&nbsp;method to build the&nbsp;FlutterActivity&nbsp;within the host app. It takes the current Activity as an argument.</li></ul><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/06/06.webp" alt="M2P Fintech" title="" width="100%" height="171">or<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/06/07.webp" alt="M2P Fintech" title="" width="100%" height="142">Add the following inside the AndroidManifest.xml file of the host app to load up the Flutter UI.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/06/08.webp" alt="M2P Fintech" title="" width="100%" height="199">Finally, the Flutter module is integrated with the native Android application.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/06/09_a.webp" alt="M2P Fintech" title="" width="100%" height="284"><h2 class="heading-node" id="8ba5">How to add Flutter to iOS?</h2>As the first step, create an empty iOS project with all the required files. Here, we are creating a new Xcode project.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/06/10.webp" alt="M2P Fintech" title="" width="100%" height="284"><img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/06/11_a.webp" alt="M2P Fintech" title="" id="xag8slkou" width="100%" height="284">To create an empty iOS project, enter the Product Name, select Team, and fill in the other details. Then click Next.We can implement the Flutter Module in two ways:(1) by embedding frameworks in Xcode(2) by embedding with CocoaPods and the Flutter SDKHere, we will embed with CocoaPods to add Flutter to a native iOS app.<h3 class="heading-node" id="9ileqvn8o">Integrating Flutter Module with the iOS application</h3>We have used FlutterViewController to build FlutterActivity to display the Flutter screen within the host, a native iOS application. However, to use this, we will also need to create a FlutterEngine class. The proper place to build a FlutterEngine is inside the AppDelegate.swift file. Now, replace the whole content of this file with the following code<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/06/12_a.webp" alt="M2P Fintech" title="" width="100%" height="227">Now, add the following lines to the ViewController.swift file in order to display the flutter screen.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/06/13_a.webp" alt="M2P Fintech" title="" width="100%" height="227">Finally, the Flutter module is integrated with the native iOS application.<img src="https://m2p-website-file.s3.ap-south-1.amazonaws.com/m2p-website-file/marketing-cms/m2p-blog/2022/06/14_a.webp" alt="M2P Fintech" title="" width="100%" height="284">Flutter is a feature-rich Software Development Kit with an enormous potential to build a banking app while achieving performance and fault tolerance. With Flutter, the app UI and logic doesn’t change depending on the platform. There is no reliance on platform-specific UI components, and it is suitable for any target platform. Using Flutter, developers can impose the critical facet of the financial industry, such as security of sensitive data and defense from reverse engineering.Looking for assistance in using Flutter to build your banking app, write to us at&nbsp;<a class="link au lh" href="mailto:business@m2pfintech.com" target="_blank" rel="noopener ugc nofollow">business@m2pfintech.com</a>. We’ll be glad to help.<a class="link" href="https://m2pfintech.com/newsletter/">Subscribe</a>&nbsp;to our newsletter and get the latest fintech news, views, and insights, directly to your inbox. Follow us on&nbsp;<a class="link" href="https://www.linkedin.com/company/m2pfintech/mycompany/">LinkedIn</a>&nbsp;and&nbsp;<a class="link" href="https://twitter.com/m2pfintech">Twitter</a>&nbsp;for insightful fintech tales curated for curious minds like you.

M2P Blog

Tag: "Ios (4)"

Setting up SSL Pinning using Public Key in Swift

Power up Flutter with SDK Integration using Method Channel

CI/CD Pipeline for iOS build generation using Jenkins

The Implications of Flutter in Fintech

Ready to Build the Future of Fintech?

Get Started