2.0.6 release.

Author: Karl Rieb

.gitignore

@@ -9,7 +9,7 @@ build/
 intellij/
 .idea/
 *.iml
-local.properties
+gradle.properties
 
 # Output file when rendering ReadMe.md locally.
 /ReadMe.html

ChangeLog.txt

@@ -1,3 +1,17 @@
+2.0.6 (2016-06-20)
+---------------------------------------------
+- Update to latest API specs:
+  - Files (DbxUserFilesRequests)
+    - Add file properties endpoints.
+  - Sharing (DbxUserSharingRequests)
+    - Add endpoints for sharing files and managing shared file membership.
+    - Change return type of removeFolderMember(..) endpoint to always be an async Job ID (LaunchEmptyResult.isAsyncJobId() will be true).
+    - Add checkRemoveMemberJobStatus(..) for checking asynchronous removeFolderMember(..) requests.
+      - Returns additional information compared to checkJobStatus(..)
+    - Change return type of updateFolderMember(..) to return a MemberAccessLevelResult instead of void.
+    - Add NO_EXPLICIT_ACCESS to UpdateFolderMemberError.
+- Fix Android Fake ID exploit where app certificate chains aren't properly validated.
+
 2.0.5 (2016-06-08)
 ---------------------------------------------
 - Allow old locale formats for APIv2 requests.

ReadMe.md

@@ -14,7 +14,7 @@ If you're using Maven, then edit your project's "pom.xml" and add this to the `<
 <dependency>
     <groupId>com.dropbox.core</groupId>
     <artifactId>dropbox-core-sdk</artifactId>
-    <version>2.0.5</version>
+    <version>2.0.6</version>
 </dependency>
 ```
 
@@ -23,7 +23,7 @@ If you are using Gradle, then edit your project's "build.gradle" and add this to
 ```groovy
 dependencies {
     // ...
-    compile 'com.dropbox.core:dropbox-core-sdk:2.0.5'
+    compile 'com.dropbox.core:dropbox-core-sdk:2.0.6'
 }
 ```
 

src/main/java/com/dropbox/core/android/AuthActivity.java

@@ -1,7 +1,7 @@
 package com.dropbox.core.android;
 
 import java.security.SecureRandom;
-import java.security.SecureRandomSpi;
+import java.util.Arrays;
 import java.util.List;
 import java.util.Locale;
 
@@ -515,15 +515,13 @@ private boolean hasDropboxApp(Intent intent) {
             }
 
             for (Signature signature : packageInfo.signatures) {
-                for (String dbSignature : DROPBOX_APP_SIGNATURES) {
-                    if (dbSignature.equals(signature.toCharsString())) {
-                        return true;
-                    }
+                if (!DROPBOX_APP_SIGNATURES.contains(signature.toCharsString())) {
+                    return false;
                 }
             }
         }
 
-        return false;
+        return true;
     }
 
     private void startWebAuth(String state) {
@@ -547,7 +545,7 @@ private void startWebAuth(String state) {
         startActivity(intent);
     }
 
-    private static final String[] DROPBOX_APP_SIGNATURES = {
+    private static final List<String> DROPBOX_APP_SIGNATURES = Arrays.asList(
             "308202223082018b02044bd207bd300d06092a864886f70d01010405003058310b3" +
                     "009060355040613025553310b300906035504081302434131163014060355040713" +
                     "0d53616e204672616e636973636f3110300e060355040a130744726f70626f78311" +
@@ -579,7 +577,7 @@ private void startWebAuth(String state) {
                     "7bac97ae6d878064d47b3f9f8da654995b8ef4c385bc4fbfbb7a987f60783ef0348" +
                     "760c0708acd4b7e63f0235c35a4fbcd5ec41b3b4cb295feaa7d5c27fa562a02562b" +
                     "7e1f4776b85147be3e295714986c4a9a07183f48ea09ae4d3ea31b88d0016c65b93" +
-                    "526b9c45f2967c3d28dee1aff5a5b29b9c2c8639"};
+                    "526b9c45f2967c3d28dee1aff5a5b29b9c2c8639");
 
     private String createStateNonce() {
         final int NONCE_BYTES = 16; // 128 bits of randomness.

src/main/java/com/dropbox/core/http/GoogleAppEngineRequestor.java

@@ -27,7 +27,16 @@
  * <p> If your app runs in Google App Engine, it is strongly recommended to use this Requestor to
  * ensure certificate validation is performed on all requests.
  *
- * <p> To use this, pass an instance to the {@link com.dropbox.core.DbxRequestConfig} constructor.
+ * <p> To use this, pass an instance to the {@link com.dropbox.core.DbxRequestConfig} constructor:
+ *
+ * <pre>
+ *     DbxRequestConfig config = DbxRequestConfig.newBuilder("MyAppEngineApp/1.0")
+ *         .withHttpRequestor(new GoogleAppEngineRequestor())
+ *         .build();
+ *
+ *     String accessToken = ...;
+ *     DbxClientV2 client = new DbxClientV2(config, accessToken);
+ * </pre>
  */
 public class GoogleAppEngineRequestor extends HttpRequestor {
     private final URLFetchService service;

src/main/java/com/dropbox/core/v2/async/LaunchResultBase.java

@@ -178,7 +178,7 @@ public String toStringMultiline() {
     /**
      * For internal use only.
      */
-    static final class Serializer extends UnionSerializer<LaunchResultBase> {
+    public static final class Serializer extends UnionSerializer<LaunchResultBase> {
         public static final Serializer INSTANCE = new Serializer();
 
         @Override