AndroidManifest.xml

<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
    xmlns:tools="http://schemas.android.com/tools">
 
    <!-- Permissions - Quyền truy cập -->
    <uses-permission android:name="android.permission.INTERNET" />
 
    <application
        android:allowBackup="true"
        android:icon="@mipmap/ic_launcher"
        android:label="@string/app_name"
        android:roundIcon="@mipmap/ic_launcher_round"
        android:supportsRtl="true"
        android:theme="@style/Theme.MyApp"
        tools:targetApi="31">
        
        <activity android:name=".MainActivity" ... />
        
    </application>
 
</manifest>

<uses-permission android:name="android.permission.INTERNET" />

<uses-permission android:name="android.permission.CAMERA" />

// Request permission at runtime
if (ContextCompat.checkSelfPermission(this, Manifest.permission.CAMERA) 
    != PackageManager.PERMISSION_GRANTED) {
    ActivityCompat.requestPermissions(this, 
        arrayOf(Manifest.permission.CAMERA), REQUEST_CODE)
}

<!-- Vị trí chính xác (GPS) - độ chính xác cao -->
<uses-permission android:name="android.permission.ACCESS_FINE_LOCATION" />
 
<!-- Vị trí xấp xỉ (Network) - tiết kiệm pin -->
<uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION" />
 
<!-- Foreground location (Android 10+) -->
<uses-permission android:name="android.permission.FOREGROUND_SERVICE_LOCATION" />
 
<!-- Background location (Android 10+) - cần giải thích rõ cho user -->
<uses-permission android:name="android.permission.ACCESS_BACKGROUND_LOCATION" />

<!-- Đọc file từ bộ nhớ -->
<uses-permission android:name="android.permission.READ_EXTERNAL_STORAGE" 
    android:maxSdkVersion="32" />
 
<!-- Ghi file vào bộ nhớ -->
<uses-permission android:name="android.permission.WRITE_EXTERNAL_STORAGE"
    android:maxSdkVersion="29" />
 
<!-- Android 13+ (API 33): Media permissions chi tiết -->
<uses-permission android:name="android.permission.READ_MEDIA_IMAGES" />
<uses-permission android:name="android.permission.READ_MEDIA_VIDEO" />
<uses-permission android:name="android.permission.READ_MEDIA_AUDIO" />

// Android 13+
if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.TIRAMISU) {
    requestPermissions(arrayOf(Manifest.permission.READ_MEDIA_IMAGES))
} else {
    requestPermissions(arrayOf(Manifest.permission.READ_EXTERNAL_STORAGE))
}

<uses-permission android:name="android.permission.POST_NOTIFICATIONS" />

if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.TIRAMISU) {
    if (ContextCompat.checkSelfPermission(this, 
        Manifest.permission.POST_NOTIFICATIONS) != PackageManager.PERMISSION_GRANTED) {
        requestPermissionLauncher.launch(Manifest.permission.POST_NOTIFICATIONS)
    }
}

<!-- Rung điện thoại -->
<uses-permission android:name="android.permission.VIBRATE" />
 
<!-- Giữ màn hình sáng -->
<uses-permission android:name="android.permission.WAKE_LOCK" />
 
<!-- Nhận sự kiện boot completed -->
<uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />
 
<!-- Bluetooth -->
<uses-permission android:name="android.permission.BLUETOOTH" />
<uses-permission android:name="android.permission.BLUETOOTH_ADMIN" />
<uses-permission android:name="android.permission.BLUETOOTH_CONNECT" /> <!-- Android 12+ -->
<uses-permission android:name="android.permission.BLUETOOTH_SCAN" /> <!-- Android 12+ -->
 
<!-- Đọc contacts -->
<uses-permission android:name="android.permission.READ_CONTACTS" />
 
<!-- Gọi điện -->
<uses-permission android:name="android.permission.CALL_PHONE" />
 
<!-- Đọc trạng thái điện thoại -->
<uses-permission android:name="android.permission.READ_PHONE_STATE" />
 
<!-- Ghi âm -->
<uses-permission android:name="android.permission.RECORD_AUDIO" />
 
<!-- Biometric (vân tay, face) -->
<uses-permission android:name="android.permission.USE_BIOMETRIC" />

<application
    android:name=".MyApplication"
    android:allowBackup="true"
    android:dataExtractionRules="@xml/data_extraction_rules"
    android:fullBackupContent="@xml/backup_rules"
    android:icon="@mipmap/ic_launcher"
    android:label="@string/app_name"
    android:roundIcon="@mipmap/ic_launcher_round"
    android:supportsRtl="true"
    android:theme="@style/Theme.MyApp"
    android:networkSecurityConfig="@xml/network_security_config"
    android:usesCleartextTraffic="false"
    android:largeHeap="false">
    
    <!-- Components here -->
    
</application>

class MyApplication : Application() {
    
    override fun onCreate() {
        super.onCreate()
        
        // Khởi tạo các libraries
        if (BuildConfig.DEBUG) {
            Timber.plant(Timber.DebugTree())
        }
        
        // Firebase
        FirebaseApp.initializeApp(this)
        
        // Crash reporting
        FirebaseCrashlytics.getInstance().setCrashlyticsCollectionEnabled(!BuildConfig.DEBUG)
    }
}

<activity
    android:name=".MainActivity"
    android:exported="true"
    android:label="@string/app_name"
    android:theme="@style/Theme.MyApp"
    android:launchMode="singleTop"
    android:screenOrientation="portrait"
    android:windowSoftInputMode="adjustResize">
    
    <intent-filter>
        <action android:name="android.intent.action.MAIN" />
        <category android:name="android.intent.category.LAUNCHER" />
    </intent-filter>
</activity>

<activity
    android:name=".DetailActivity"
    android:exported="false"
    android:parentActivityName=".MainActivity"
    android:theme="@style/Theme.MyApp">
    
    <!-- Enable Up navigation automatically -->
    <meta-data
        android:name="android.support.PARENT_ACTIVITY"
        android:value=".MainActivity" />
</activity>

<activity 
    android:name=".ProductActivity"
    android:exported="true">
    
    <!-- App Links (HTTPS - verified) -->
    <intent-filter android:autoVerify="true">
        <action android:name="android.intent.action.VIEW" />
        <category android:name="android.intent.category.DEFAULT" />
        <category android:name="android.intent.category.BROWSABLE" />
        <data 
            android:scheme="https"
            android:host="www.mystore.com"
            android:pathPrefix="/product" />
    </intent-filter>
    
    <!-- Custom Scheme (không cần verify) -->
    <intent-filter>
        <action android:name="android.intent.action.VIEW" />
        <category android:name="android.intent.category.DEFAULT" />
        <category android:name="android.intent.category.BROWSABLE" />
        <data 
            android:scheme="myapp"
            android:host="product" />
    </intent-filter>
</activity>

class ProductActivity : AppCompatActivity() {
    
    override fun onCreate(savedInstanceState: Bundle?) {
        super.onCreate(savedInstanceState)
        
        // Handle deep link
        handleIntent(intent)
    }
    
    override fun onNewIntent(intent: Intent?) {
        super.onNewIntent(intent)
        intent?.let { handleIntent(it) }
    }
    
    private fun handleIntent(intent: Intent) {
        val data: Uri? = intent.data
        
        data?.let {
            val productId = it.lastPathSegment // "123" from /product/123
            loadProduct(productId)
        }
    }
}

<service
    android:name=".DownloadService"
    android:exported="false"
    android:enabled="true" />

<service
    android:name=".MusicPlayerService"
    android:foregroundServiceType="mediaPlayback"
    android:exported="false" />
 
<service
    android:name=".LocationTrackingService"
    android:foregroundServiceType="location"
    android:exported="false" />
 
<service
    android:name=".UploadService"
    android:foregroundServiceType="dataSync"
    android:exported="false" />

class MusicPlayerService : Service() {
    
    override fun onStartCommand(intent: Intent?, flags: Int, startId: Int): Int {
        val notification = createNotification()
        
        if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.Q) {
            startForeground(NOTIFICATION_ID, notification, 
                ServiceInfo.FOREGROUND_SERVICE_TYPE_MEDIA_PLAYBACK)
        } else {
            startForeground(NOTIFICATION_ID, notification)
        }
        
        // Play music...
        return START_STICKY
    }
}

<service
    android:name=".MessengerService"
    android:exported="false">
    <intent-filter>
        <action android:name="com.example.messenger.BIND" />
    </intent-filter>
</service>

<receiver
    android:name=".BootCompletedReceiver"
    android:exported="true"
    android:enabled="true">
    <intent-filter>
        <action android:name="android.intent.action.BOOT_COMPLETED" />
    </intent-filter>
</receiver>

<!-- Khi device boot xong -->
<receiver android:name=".BootReceiver" android:exported="true">
    <intent-filter>
        <action android:name="android.intent.action.BOOT_COMPLETED" />
    </intent-filter>
</receiver>
 
<!-- Khi timezone/time thay đổi -->
<receiver android:name=".TimeChangeReceiver" android:exported="true">
    <intent-filter>
        <action android:name="android.intent.action.TIMEZONE_CHANGED" />
        <action android:name="android.intent.action.TIME_SET" />
    </intent-filter>
</receiver>
 
<!-- Khi battery low -->
<receiver android:name=".BatteryReceiver" android:exported="true">
    <intent-filter>
        <action android:name="android.intent.action.BATTERY_LOW" />
        <action android:name="android.intent.action.BATTERY_OKAY" />
    </intent-filter>
</receiver>
 
<!-- Khi network thay đổi (deprecated, dùng NetworkCallback) -->
<receiver android:name=".NetworkReceiver" android:exported="true">
    <intent-filter>
        <action android:name="android.net.conn.CONNECTIVITY_CHANGE" />
    </intent-filter>
</receiver>

class MainActivity : AppCompatActivity() {
    
    private val screenReceiver = object : BroadcastReceiver() {
        override fun onReceive(context: Context, intent: Intent) {
            when (intent.action) {
                Intent.ACTION_SCREEN_ON -> handleScreenOn()
                Intent.ACTION_SCREEN_OFF -> handleScreenOff()
            }
        }
    }
    
    override fun onResume() {
        super.onResume()
        val filter = IntentFilter().apply {
            addAction(Intent.ACTION_SCREEN_ON)
            addAction(Intent.ACTION_SCREEN_OFF)
        }
        registerReceiver(screenReceiver, filter)
    }
    
    override fun onPause() {
        super.onPause()
        unregisterReceiver(screenReceiver)
    }
}

<provider
    android:name="androidx.core.content.FileProvider"
    android:authorities="${applicationId}.fileprovider"
    android:exported="false"
    android:grantUriPermissions="true">
    <meta-data
        android:name="android.support.FILE_PROVIDER_PATHS"
        android:resource="@xml/file_paths" />
</provider>

<?xml version="1.0" encoding="utf-8"?>
<paths>
    <!-- Internal app storage: /data/data/com.example/files/ -->
    <files-path name="internal_files" path="." />
    
    <!-- Internal cache: /data/data/com.example/cache/ -->
    <cache-path name="cache" path="." />
    
    <!-- External files: /storage/emulated/0/Android/data/com.example/files/ -->
    <external-files-path name="external_files" path="." />
    
    <!-- External cache -->
    <external-cache-path name="external_cache" path="." />
    
    <!-- External storage root (deprecated) -->
    <external-path name="external" path="." />
    
    <!-- Specific subdirectory -->
    <files-path name="images" path="images/" />
</paths>

fun shareImage(context: Context, imageFile: File) {
    val uri = FileProvider.getUriForFile(
        context,
        "${context.packageName}.fileprovider",
        imageFile
    )
    
    val shareIntent = Intent(Intent.ACTION_SEND).apply {
        type = "image/*"
        putExtra(Intent.EXTRA_STREAM, uri)
        addFlags(Intent.FLAG_GRANT_READ_URI_PERMISSION)
    }
    
    context.startActivity(Intent.createChooser(shareIntent, "Share via"))
}

<provider
    android:name=".data.NotesProvider"
    android:authorities="com.example.app.provider"
    android:exported="true"
    android:permission="com.example.app.READ_NOTES">
    
    <path-permission
        android:pathPrefix="/notes"
        android:readPermission="com.example.app.READ_NOTES"
        android:writePermission="com.example.app.WRITE_NOTES" />
</provider>

<!-- Camera bắt buộc - app sẽ không hiện trên devices không có camera -->
<uses-feature 
    android:name="android.hardware.camera"
    android:required="true" />
 
<!-- Camera tùy chọn - app vẫn hiện nhưng có thể kiểm tra runtime -->
<uses-feature 
    android:name="android.hardware.camera"
    android:required="false" />
 
<!-- GPS -->
<uses-feature 
    android:name="android.hardware.location.gps"
    android:required="false" />
 
<!-- Bluetooth -->
<uses-feature 
    android:name="android.hardware.bluetooth"
    android:required="false" />
 
<!-- NFC -->
<uses-feature 
    android:name="android.hardware.nfc"
    android:required="false" />
 
<!-- Fingerprint -->
<uses-feature 
    android:name="android.hardware.fingerprint"
    android:required="false" />
 
<!-- Telephony (cho phone apps) -->
<uses-feature 
    android:name="android.hardware.telephony"
    android:required="false" />
 
<!-- Microphone -->
<uses-feature 
    android:name="android.hardware.microphone"
    android:required="true" />

fun hasCameraFeature(context: Context): Boolean {
    return context.packageManager.hasSystemFeature(PackageManager.FEATURE_CAMERA)
}
 
fun hasNfcFeature(context: Context): Boolean {
    return context.packageManager.hasSystemFeature(PackageManager.FEATURE_NFC)
}

<supports-screens
    android:smallScreens="true"
    android:normalScreens="true"
    android:largeScreens="true"
    android:xlargeScreens="true"
    android:anyDensity="true"
    android:resizeable="true" />

<compatible-screens>
    <!-- Chỉ hỗ trợ normal screens với hdpi, xhdpi, xxhdpi -->
    <screen android:screenSize="normal" android:screenDensity="hdpi" />
    <screen android:screenSize="normal" android:screenDensity="xhdpi" />
    <screen android:screenSize="normal" android:screenDensity="xxhdpi" />
</compatible-screens>

<application>
    <!-- Google Maps API Key -->
    <meta-data
        android:name="com.google.android.geo.API_KEY"
        android:value="${MAPS_API_KEY}" />
    
    <!-- Google Play Services version check -->
    <meta-data
        android:name="com.google.android.gms.version"
        android:value="@integer/google_play_services_version" />
</application>

<application>
    <!-- Default notification icon -->
    <meta-data
        android:name="com.google.firebase.messaging.default_notification_icon"
        android:resource="@drawable/ic_notification" />
    
    <!-- Default notification color -->
    <meta-data
        android:name="com.google.firebase.messaging.default_notification_color"
        android:resource="@color/colorAccent" />
    
    <!-- Default notification channel -->
    <meta-data
        android:name="com.google.firebase.messaging.default_notification_channel_id"
        android:value="default_channel" />
</application>

<application>
    <meta-data
        android:name="com.facebook.sdk.ApplicationId"
        android:value="@string/facebook_app_id" />
    
    <meta-data
        android:name="com.facebook.sdk.ClientToken"
        android:value="@string/facebook_client_token" />
</application>

<application>
    <meta-data
        android:name="com.google.android.gms.ads.APPLICATION_ID"
        android:value="ca-app-pub-xxxxxxxx~xxxxxxxx" />
</application>

<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
    
    <!-- Base config cho tất cả domains -->
    <base-config cleartextTrafficPermitted="false">
        <trust-anchors>
            <certificates src="system" />
        </trust-anchors>
    </base-config>
    
    <!-- Cho phép cleartext cho localhost (development) -->
    <domain-config cleartextTrafficPermitted="true">
        <domain includeSubdomains="true">localhost</domain>
        <domain includeSubdomains="true">10.0.2.2</domain>
        <domain includeSubdomains="true">192.168.1.0</domain>
    </domain-config>
    
    <!-- Debug-only: trust user-installed certificates -->
    <debug-overrides>
        <trust-anchors>
            <certificates src="user" />
            <certificates src="system" />
        </trust-anchors>
    </debug-overrides>
    
</network-security-config>

<application
    android:networkSecurityConfig="@xml/network_security_config">

<domain-config>
    <domain includeSubdomains="true">api.myapp.com</domain>
    <pin-set expiration="2025-12-31">
        <pin digest="SHA-256">base64EncodedPublicKeyHash1=</pin>
        <pin digest="SHA-256">base64EncodedPublicKeyHash2=</pin>
    </pin-set>
</domain-config>

<queries>
    <!-- Specific packages -->
    <package android:name="com.facebook.katana" />
    <package android:name="com.twitter.android" />
    
    <!-- Apps that handle specific intents -->
    <intent>
        <action android:name="android.intent.action.VIEW" />
        <data android:scheme="https" />
    </intent>
    
    <!-- Apps that handle sharing -->
    <intent>
        <action android:name="android.intent.action.SEND" />
        <data android:mimeType="image/*" />
    </intent>
    
    <!-- Apps that can take photos -->
    <intent>
        <action android:name="android.media.action.IMAGE_CAPTURE" />
    </intent>
</queries>

<?xml version="1.0" encoding="utf-8"?>
<manifest xmlns:android="http://schemas.android.com/apk/res/android"
    xmlns:tools="http://schemas.android.com/tools">
 
    <!-- Permissions -->
    <uses-permission android:name="android.permission.INTERNET" />
    <uses-permission android:name="android.permission.ACCESS_FINE_LOCATION" />
    <uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION" />
    <uses-permission android:name="android.permission.CAMERA" />
    <uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
    <uses-permission android:name="android.permission.VIBRATE" />
    <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />
    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_LOCATION" />
    
    <!-- Features -->
    <uses-feature android:name="android.hardware.camera" android:required="false" />
    <uses-feature android:name="android.hardware.location.gps" android:required="false" />
    
    <!-- Package visibility (Android 11+) -->
    <queries>
        <intent>
            <action android:name="android.intent.action.VIEW" />
            <data android:scheme="https" />
        </intent>
    </queries>
 
    <application
        android:name=".MyApplication"
        android:allowBackup="true"
        android:dataExtractionRules="@xml/data_extraction_rules"
        android:fullBackupContent="@xml/backup_rules"
        android:icon="@mipmap/ic_launcher"
        android:label="@string/app_name"
        android:roundIcon="@mipmap/ic_launcher_round"
        android:supportsRtl="true"
        android:theme="@style/Theme.MyApp"
        android:networkSecurityConfig="@xml/network_security_config"
        tools:targetApi="34">
 
        <!-- Main Activity -->
        <activity
            android:name=".MainActivity"
            android:exported="true"
            android:launchMode="singleTop"
            android:theme="@style/Theme.MyApp.Splash">
            <intent-filter>
                <action android:name="android.intent.action.MAIN" />
                <category android:name="android.intent.category.LAUNCHER" />
            </intent-filter>
            
            <!-- Deep Links -->
            <intent-filter android:autoVerify="true">
                <action android:name="android.intent.action.VIEW" />
                <category android:name="android.intent.category.DEFAULT" />
                <category android:name="android.intent.category.BROWSABLE" />
                <data android:scheme="https" android:host="myapp.com" />
            </intent-filter>
        </activity>
 
        <!-- Other Activities -->
        <activity
            android:name=".DetailActivity"
            android:exported="false"
            android:parentActivityName=".MainActivity" />
 
        <!-- Services -->
        <service
            android:name=".LocationService"
            android:foregroundServiceType="location"
            android:exported="false" />
 
        <!-- Receivers -->
        <receiver
            android:name=".BootReceiver"
            android:exported="true">
            <intent-filter>
                <action android:name="android.intent.action.BOOT_COMPLETED" />
            </intent-filter>
        </receiver>
 
        <!-- Providers -->
        <provider
            android:name="androidx.core.content.FileProvider"
            android:authorities="${applicationId}.fileprovider"
            android:exported="false"
            android:grantUriPermissions="true">
            <meta-data
                android:name="android.support.FILE_PROVIDER_PATHS"
                android:resource="@xml/file_paths" />
        </provider>
 
        <!-- Meta-data -->
        <meta-data
            android:name="com.google.android.geo.API_KEY"
            android:value="${MAPS_API_KEY}" />
 
        <meta-data
            android:name="com.google.firebase.messaging.default_notification_icon"
            android:resource="@drawable/ic_notification" />
 
    </application>
 
</manifest>