TheWidlarzGroup/react-native-video

[feature/ios] support self signed https URL

Open

#2,776 opened on Jul 20, 2022

View on GitHub
 (2 comments) (0 reactions) (0 assignees)Kotlin (7,677 stars) (3,027 forks)batch import
6.x.xPlatform: iOSfeaturehelp wanted

Description

When I what to play a video asset stored in self signed certificate server via iOS, it shows error as "The certificate for this server is invalid.". Is there any way to ignore certificate validation? When request data from self signed cert server with NSURLSession, I can ignore cert validation using following code

- (void)URLSession:(NSURLSession *)session didReceiveChallenge:(NSURLAuthenticationChallenge *)challenge completionHandler:(void (^)(NSURLSessionAuthChallengeDisposition, NSURLCredential * _Nullable))completionHandler {
    NSURLCredential *credential = [NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust];
    completionHandler(NSURLSessionAuthChallengeUseCredential, credential);
}

How can I do this in this component? as this issue #2649

Contributor guide

Tech stack
react nativeobjective c
Domain
mobilesecurity
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
iOS developmentObjective C or SwiftReact Native native modules
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
25
Research direction
Investigate the iOS native component (likely ios/RNVideo.m or ios/RNVideo.swift) to see how it manages URL requests and authentication challenges. Refer to issue #2649 for previous discussion on self signed certificates. The maintainer should evaluate whether to add a prop like allowInsecureConnections to bypass certificate validation for development. Implementation would involve adding a delegate method for didReceiveChallenge in the native module.