feat: incoming message origin validation for react native

[michaeljsXu]

What changes are you making?

Expose allowedMessageOrigins and a typed onMessageRejected callback through the React Native API. The callback remains in JavaScript while serializable configuration crosses the native bridge, supports replacement and removal, and is cleaned up by teardown().

Both native bridges emit the same {origin, message, reason} payload, and getConfig() round-trips configured origins and the current JavaScript callback.

How to test

From platforms/react-native:

pnpm test modules/@shopify/checkout-kit-react-native/tests/index.test.ts --runInBand
pnpm module typecheck
pnpm module api:dump

[michaeljsXu]

• docs: incoming message origin validation across platforms #478
• feat: incoming message origin validation for react native #477 👈 (View in Graphite)
• feat: incoming message origin validation for ios #476
• feat: incoming message origin validation for android #475
• feat: incoming mesage origin validation for web #474
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[github-actions]

React Native — Coverage Report

Lines	Statements	Branches	Functions
	92.06% (325/353)	89.62% (190/212)	100% (85/85)

[github-actions]

Package Size

Platform	Artifact	Base	Head	Delta
React Native	npm tarball	101.6 KiB	103.6 KiB	+2.1 KiB

React Native file breakdown

File	Base	Head	Delta
node_modules/@shopify/checkout-kit-protocol/src/generated/Models.ts	85.4 KiB	85.4 KiB	0 B
node_modules/@shopify/checkout-kit-protocol/src/generated/Models.d.ts	53.0 KiB	53.0 KiB	0 B
ios/ShopifyCheckoutKit.swift	13.5 KiB	14.4 KiB	+958 B
ios/AcceleratedCheckoutButtons.swift	14.1 KiB	14.1 KiB	0 B
android/src/main/java/com/shopify/reactnative/checkoutkit/ShopifyCheckoutKitModule.java	12.8 KiB	14.0 KiB	+1.3 KiB
src/index.ts	12.2 KiB	13.6 KiB	+1.4 KiB
lib/commonjs/index.js	12.3 KiB	13.5 KiB	+1.2 KiB
src/components/AcceleratedCheckoutButtons.tsx	13.0 KiB	13.0 KiB	0 B
lib/commonjs/components/AcceleratedCheckoutButtons.js	11.4 KiB	11.4 KiB	0 B
lib/module/index.js	10.2 KiB	11.4 KiB	+1.2 KiB
lib/commonjs/components/AcceleratedCheckoutButtons.js.map	10.4 KiB	10.4 KiB	0 B
lib/module/components/AcceleratedCheckoutButtons.js	10.2 KiB	10.2 KiB	0 B
src/index.d.ts	9.1 KiB	10.1 KiB	+988 B
node_modules/@shopify/checkout-kit-protocol/src/generated/ProtocolNotifications.ts	9.5 KiB	9.5 KiB	0 B
lib/module/components/AcceleratedCheckoutButtons.js.map	9.1 KiB	9.1 KiB	0 B
lib/module/index.js.map	7.9 KiB	8.9 KiB	+1.1 KiB
lib/commonjs/index.js.map	7.7 KiB	8.7 KiB	+1.1 KiB
src/present-dispatcher.ts	8.0 KiB	8.0 KiB	0 B
node_modules/@shopify/checkout-kit-protocol/src/generated/ProtocolNotifications.d.ts	7.6 KiB	7.6 KiB	0 B
node_modules/@shopify/checkout-kit-protocol/src/generated/ProtocolRenameMap.ts	7.2 KiB	7.2 KiB	0 B
…and 110 smaller files

Measured from the PR base SHA and PR head SHA. The file breakdown shows uncompressed sizes within each package artifact, so individual files do not sum to the compressed artifact total. This comment reports package artifact sizes only; it is not a final app binary-size report.

[bitrise]

Install this build

Open Tophat, select your target device, then click Install. Links open on the Mac running Tophat.

SDK	Install
React Native	Install with Tophat

Checkout Kit E2E results

Status	Suite	Target	Platform	OS version tag	Device
✅	tests/shared/launch-smoke.yaml	react-native	ios	latest	iPhone 15 iOS 27 Beta
✅	tests/shared/launch-smoke.yaml	react-native	android	latest	Google Pixel 9 Android 17.0

[markmur]

I don’t think listener ownership should be encoded as checkout configuration. hasMessageRejectedCallback is bridge implementation state rather than checkout configuration, and coupling the two makes unrelated updates destructive.

The configuration behaviour is a little inconsistent in its current state. Omitting the title, preloading, or allowedMessageOrigins attributes preserve their current native values, while omitting onMessageRejected clears it.

Could we manage the event bridge through a dedicated lifecycle method instead?

RNShopifyCheckoutKit.setMessageRejectedListenerEnabled(true);

[tiagocandido]

Closing in favor of #648, which ships the origins passthrough without the rejection callback — we settled on warn-level logging instead of onMessageRejected (removed from the native SDKs in #646/#647 before it shipped in a stable release).