bytedance / tiktok-business-android-sdk Goto Github PK

The methods parse() and format() in java.text.Format contains a race condition that can cause one user to see another user's data.

Hello,

I have an issue while trying to use identify method of the TikTokBusinessSdk.
I'm currently using version 1.2.6 of this library, and my targetSdkVersion and compileSdkVersion are 30.
I've set up the project following the documentation here

I got this error in console :

     Caused by: java.lang.NoSuchMethodError: No static method encodeHexString([B)Ljava/lang/String; in class Lorg/apache/commons/codec/binary/Hex; or its super classes (declaration of 'org.apache.commons.codec.binary.Hex' appears in /system/framework/org.apache.http.legacy.jar)
        at org.apache.commons.codec.digest.DigestUtils.sha256Hex(DigestUtils.java:722)
        at com.tiktok.appevents.TTUserInfo.toSha256(TTUserInfo.java:41)
        at com.tiktok.appevents.TTUserInfo.setExternalId(TTUserInfo.java:55)
        at com.tiktok.appevents.TTAppEventLogger.identify(TTAppEventLogger.java:181)
        at com.tiktok.TikTokBusinessSdk.identify(TikTokBusinessSdk.java:466)

I tried to add implementation 'commons-codec:commons-codec:1.15' in my build.gradle, but it doesn't fix the problem.

It seems that there are some compatibility issues between Apache DigestUtils and Android (see here - the post is old, but the problem still seems to be here).

Thank you !

As per your document i added below maven into project
maven { url 'https://dl.bintray.com/aweme-open-sdk-team/public' }

after adding maven url getting error 403 forbidden error for this url (https://dl.bintray.com/aweme-open-sdk-team/public)

Due to that project can not build successfully.

This field is never used.

The GetInputStream could not be released correctly.Most unreleased resource issues cause general software reliability problems.However, if an attacker can intentionally trigger a resource leak, an attacker can launch a denial-of-service attack by depleting the resource pool.

The GetInputStream could not be released correctly.Most unreleased resource issues cause general software reliability problems.However, if an attacker can intentionally trigger a resource leak, an attacker can launch a denial-of-service attack by depleting the resource pool.

The methods parse() and format() in java.text.Format contains a race condition that can cause one user to see another user's data.

The methods parse() and format() in java.text.Format contains a race condition that can cause one user to see another user's data.

The methods parse() and format() in java.text.Format contains a race condition that can cause one user to see another user's data.

The methods parse() and format() in java.text.Format contains a race condition that can cause one user to see another user's data.

The methods parse() and format() in java.text.Format contains a race condition that can cause one user to see another user's data.