mPaaS 10.2.3 upgrade guide - Mobile Platform as a Service

Based on version 10.1.68.52 , Mobile PaaS (mPaaS) 10.2.3 baseline incorporates changes such as new components, custom functions, and compliance transformations in multiple custom baselines. mPaaS 10.2.3 baseline includes but is not limited to the following features.

Security and compliance

Security Guard supports the digital signatures using Chinese national cryptography. To use the 10.2.3 baseline, you need to change the version of Security Guard images to V6. If you use the original images of V5, an error will be reported. For more information about how to upgrade images, see Configure the version of Security Guard images to V6 for more information.

New components

mPaaS GMSSL (private cloud)
Face Liveness Detection (private cloud)
Mobile terminal environment detection (private cloud)
Mobile Threat Awareness device risk consulting services (private cloud)
Code Scanner
Intelligent Dual-Recording System (private cloud)
Ant Cube Card

Compatibility

For versions of and later than mPaaS 10.2.3.4, targetSdkVersion 31 is supported.
mPaaS 10.2.3 baseline supports targetSdkVersion 30.
mPaaS 10.2.3 baseline supports the CPU architectures armeabi-v7a and arm64-v8a only. Note that armeabi is no longer supported.
The mPaaS Inside integration method is no longer maintained. To use an integration method in mPaaS 10.2.3 baseline, you need to change mPaaS Inside integration to native AAR integration.
By default, mPaaS 10.2.3 baseline has been adapted to Android 13. Therefore, you do not need to perform additional adaptation tasks after you upgrade mPaaS to the 10.2.3 baseline.

Upgrade guide

Configure the version of Security Guard images to V6

Download the latest configuration file in the mPaaS console. For more information, see Download the latest configuration file.
Check whether the key named v6Base64Code exists in the downloaded file (Ant-mpaas-xxxxx-Android.config) and the key has a value. If the value is null, you need to confirm that the Android Package Kit (APK) with a correct signature has been uploaded before the download, and then re-download the file.
Upgrade the easyconfig plug-in in your project to version 2.8.4, and modify the following configuration under the root directory build.gradle.
```
classpath 'com.android.boost.easyconfig:easyconfig:2.8.4'
```
Recompile APK after the configuration is completed.
Important
After you upgrade the version of Security Guard images to V6, you still need to enable v1 signature. For more information, see How to resolve 608 error or libsgmain native error occurred during runtime.

Security assurance

When you develop an app based on the mPaaS framework, the app that uses the HTML5 Container or Mini Program SDK calls JavaScript API (JSAPI) more often. We recommend that you verify the URL when you open the URL and call the JSAPI. In this case, you need to make sure that only the URL within an app can be loaded to open or restrict JSAPI scopes and permissions of the URL. This can avoid the problems when authentication is not performed.

Set JSAPI authentication. For more information, see Set JSAPI authentication.
Set the URL whitelist. For more information, see Set the URL whitelist.

Component changes

In mPaaS 10.2.3 baseline, the following components are changed. If you chose these components before, you need to perform operations again according to the following changes. For more information, see Component management.

Sync Service is changed to Mobile Sync Service (MSS).
Code Scanner
Code Scanner is added. If you need to use AI to scan a code, you can add this component.

Upgrade guide about component usage

Unified storage

For baseline version of and later than 10.2.3, there is an update to how the database store creates the OrmLiteSqliteOpenHelper, for more information, see Create OrmLiteSqliteOpenHelper.

Component API changes

Unified storage

Added com.alibaba.mpaasdb.MPSQLiteOpenHelper.
Added com.alibaba.mpaasdb.MPSQLiteDatabase.
Removed com.alibaba.sqlcrypto.sqlite.SQLiteDatabase.
Changed com.j256.ormlite.xx to com.alibaba.j256.ormlite.xx.

Handle custom baselines

If you are using a custom baseline, you may need to customize the baseline again based on the new version. To do this, submit a ticket or contact mPaaS Customer Service for confirmation.

Perform regression tests

Component

Test item

Mobile Gateway Service (MGS)

Check whether RPC requests are normal.
Check whether RPC requests are normal after signature verification is enabled.

Message Push Service (MPS)

Check whether messages can be pushed by users successfully.
Check whether messages can be pushed by vendor channels successfully.

MSS

Check whether the synchronization feature is normal.

Datacenter

Check whether the feature of encrypting data stored in databases is normal. For more information, see Encrypt data stored in databases.

UC kernel

Check whether UC kernel is enabled on your Android 13 device.

HTML5 Containers and offline packages

Check whether the services that depend on the features of UC kernel are running properly.
Check whether offline packages can be downloaded and updated properly.

Mini Program

Check whether the services that depend on the features of UC kernel are running properly.
Check whether the Mini Program SDK can be downloaded and updated properly

Switch configuration service

Check whether the switch can be delivered and updated normally.

Upgrade

Check whether version updates can be detected.

Hotpatch

Check whether the patch package is downloaded properly.

Mobile Content Delivery Platform (MCDP)

Check whether the booth and material information can be downloaded and updated normally.

Location-based Service (LBS)

Check whether the check-in feature is normal.

Mobile Real-Time Communication (MRTC)

Check whether a call can be successfully established and the video footage is normal.