Security #

• Obfuscated Firebase configuration using XOR + Base64 encoding to prevent static analysis
• Runtime-only decoding of Firebase credentials to prevent exposure in source code
• Enhanced ProGuard rules to protect obfuscation utilities and configuration classes
• Added dummy/decoy values to confuse reverse engineering attempts

Added #

• ConfigObfuscator utility class for runtime configuration decoding
• Lazy initialization of decoded values to minimize memory footprint

Security #

• Disabled all logging to prevent exposure of sensitive information (URLs, endpoints, request/response data)
• Removed sensitive information from Firebase Performance traces (endpoint, service, URL attributes removed)
• Disabled HTTP client logging to prevent exposure of request/response bodies and headers
• All logging calls remain in code but are disabled by default for security

Changed #

• Removed Firestore Data Structure section from README.md

Added #

• Initial release of Finance SDK
• Firebase-based dynamic API orchestration
• Automatic Firestore integration for API definitions
• Remote Config integration for base URL management
• Dynamic enum generation from Firestore data
• Local caching with SharedPreferences
• Comprehensive logging system
• Firebase Performance Monitoring integration
• Bearer token support for Authorization header
• Base URL override feature for testing
• Support for GET, POST, PUT, DELETE, PATCH requests
• Custom HTTP logging client
• Structured error handling with ApiResponse
• Example app demonstrating all features
• ProGuard rules for Android release builds
• Comprehensive documentation

Security #

• Embedded Firebase configuration to ensure all users use the same Firebase project
• ProGuard rules to protect configuration in release builds
• Secure token storage using SharedPreferences

Documentation #

• Complete README with setup instructions
• Firebase setup guide
• Remote Config setup guide
• Testing guide
• API documentation