Mobile Platform as a Service:mPaaS 10.2.3 upgrade guide

Security compliance

Security Guard now supports SM signatures. You must replace the Security Guard image with V6. Using the V5 image causes errors. For more information, see Configure the V6 Security Guard image.

New components

• mPaaS GMSSL (private cloud)

• Face Liveness Detection (private cloud)

• Mobile terminal environment detection (private cloud)

• Mobile Threat Awareness device risk consulting services (private cloud)

• Code Scanner

• Intelligent Dual-Recording System (private cloud)

• Ant Cube Card

Compatibility

• Starting from mPaaS 10.2.3.4, targetSdkVersion 31 is supported.

• Supports targetSdkVersion 30.

• Only armeabi-v7a and arm64-v8a CPU architectures are supported. armeabi is no longer supported.

• mPaaS Inside is no longer maintained. To upgrade to 10.2.3, switch to the mPaaS AAR connection type.

• Compatible with Android 13 by default. No additional configuration required.

Upgrade guide

Configure the V6 Security Guard image

1. In the mPaaS console, download the latest configuration file.

   

2. Verify that the downloaded configuration file (Ant-mpaas-xxxxx-Android.config) contains a non-empty v6Base64Code key. If the value is empty, upload a correctly signed APK and download the file again.

3. Upgrade the easyconfig plugin to version 2.8.4. In the root build.gradle, update the configuration:

   classpath 'com.android.boost.easyconfig:easyconfig:2.8.4'

4. The configuration is complete. Recompile the APK.

   Important

   V6 still requires V1 signatures. How to resolve runtime error 608 or libsgmain native error.

Security measures

Apps using HTML5 containers or miniapps rely on JSAPIs. To prevent unauthorized access, validate URLs on open and authenticate JSAPI calls to restrict which URLs can load and which APIs they can invoke.

1. Set up JSAPI authentication.

2. Set up a URL whitelist.

Component management changes

The following components are renamed in 10.2.3. Reconfigure them after the upgrade. For more information, see Component management.

• Sync Service is renamed to Mobile Sync Service (MSS).

• Code Scanner.

• Code Scanner AI component is added. Enable this component for AI-powered code scanning.

Component upgrade guide

Datacenter

In 10.2.3, the method for creating an OrmLiteSqliteOpenHelper for database storage changed. For more information, see Create an OrmLiteSqliteOpenHelper.

Component API changes

Datacenter

• Added: com.alibaba.mpaasdb.MPSQLiteOpenHelper.

• Added: com.alibaba.mpaasdb.MPSQLiteDatabase.

• Removed: com.alibaba.sqlcrypto.sqlite.SQLiteDatabase.

• All com.j256.ormlite.xx packages are moved to com.alibaba.j256.ormlite.xx.

Handling custom baselines

If you use a custom baseline, you may need to recreate it for this version. Join the DingTalk group (ID: 145930007362) to confirm with mPaaS technical support.

Regression testing

Component	Verification items
Mobile Gateway Service (MGS)	RPC requests are normal. RPC requests are normal after signature verification is enabled.
Mobile Push Service (MPS)	User-dimension pushes are normal. Pushes through third-party channels are normal.
Mobile Sync Service (MSS)	The sync feature is normal.
Datacenter	Encrypted database storage is normal.
UC Kernel	Enabled on Android 13 devices
HTML5 Container and offline packages	Check the operational status of services that depend on UC kernel attributes. Offline package downloads and updates are normal.
Mini Program	Are services that rely on UC kernel features functioning correctly? Miniapp downloads and updates are normal.
Switch Configuration Service	Switch delivery and updates are normal.
Upgrade	Version update checks are normal.
Hotpatch	Patch package downloads are normal.
Mobile Content Delivery Platform (MCDP)	Booth and material information downloads and updates are normal.
Location-based Service (LBS)	The check-in feature is normal.
Mobile Real-Time Communication (MRTC)	Calls are established and video displays correctly.