2995840376 0ce191c448 chore: 初始化 iotsaas 版本库基线
纳入范围:
- backend/  Spring Boot 多模块后端(iot-common/device/rule/data/alarm/auth)
- frontend/admin/  Vue3 + Element Plus 管理后台
- Android/   涂鸦原生 APP (com.xhai.iot)
- backend/sql/  Flyway 风格迁移脚本(V2~V21)
- docs/       对接文档与设计文档

排除范围:
- 构建产物: node_modules/ target/ build/ dist/ .gradle/
- 签名密钥: *.jks *.keystore (严禁入库)
- 本机配置: Android/local.properties
- 运行日志: logs/ *.log
- AI 协作本地数据 .codebuddy/ 与第三方 demo tuya-demo/

.gitattributes 统一以 LF 存储, Windows 批处理保留 CRLF
2026-10-27 12:00:41 +08:00

50 lines
2.2 KiB
Markdown
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# Thing Security Guide
> Full document link: https://developer.tuya.com/docs/app-development/
## Getting Started
1. Unzip the tar and get the `xxx.aar` file.
2. Take the `xxx.aar` file into your `project/app/libs` folder.
3. Make suer you have the following code in your `project/app/build.gradle` file.
```groovy
apply plugin: 'com.android.application'
// xxx
dependencies {
implementation fileTree(include: ['*.aar'], dir: 'libs')
}
```
4. Make sure you <font color='red'>don't have</font> this file in any of your directories:`t_s.bmp` .
5. Make sure your application 's `package name` is consistent with the Tuya's configuration.
6. Make sure your `AppKey` and `AppSecret` are consistent with the Tuya's configuration.
7. Make suer your `keystore file's SHA256` is configured in the Tuya's configuration. ([How to get the keystore's SHA256](https://developer.tuya.com/docs/iot/resignature-configuration?id=K9ijw4rj59tuq#title-5-%E5%A6%82%E4%BD%95%E6%9F%A5%E7%9C%8B%20Android%20App%20%E5%BA%94%E7%94%A8%E7%9A%84%20SHA256%20%E5%AF%86%E9%92%A5%EF%BC%9F) and [How to add the keystore's SHA256 in Tuya's platform](https://developer.tuya.com/docs/iot/resignature-configuration?id=K9ijw4rj59tuq#title-6-%E5%A6%82%E4%BD%95%E4%B8%BA%E6%B6%82%E9%B8%A6%20App%20SDK%20%E5%BA%94%E7%94%A8%E6%B7%BB%E5%8A%A0%20SHA256%20%E5%AF%86%E9%92%A5%EF%BC%9F))
## <font color='red'>Note for TRIAL_VERSION</font>
* If you are using the <font color='red'>trial version</font>, you may encounter a permission prompt of "applying for location" when the application starts, this is to prevent the trial version from being misused and put it on the application market.
* If you are using the <font color='red'>trial version</font>, there will be a <font color='red'>Toast</font> prompt when the application starts.
## QA
* Permission verification failed
> The high probability is caused by incorrect algorithm-xxx.aar
* illegal client
> It is necessary to check whether the **AppKey**, **AppSecret**, **package name**, **keystore‘s sha256**, **algorithm-xxx.aar file** are consistent with the Tuya platform configuration. the [full issue doc](https://developer.tuya.com/docs/iot/resignature-configuration?id=K9ijw4rj59tuq#title-7-%E6%8A%A5%E9%94%99%E6%8E%92%E6%9F%A5).