TheWidlarzGroup/react-native-video

[feature/ios] support self signed https URL

Open

#2 776 ouverte le 20 juil. 2022

Voir sur GitHub
 (2 commentaires) (0 réactions) (0 assignés)Kotlin (7 677 stars) (3 027 forks)batch import
6.x.xPlatform: iOSfeaturehelp wanted

Description

When I what to play a video asset stored in self signed certificate server via iOS, it shows error as "The certificate for this server is invalid.". Is there any way to ignore certificate validation? When request data from self signed cert server with NSURLSession, I can ignore cert validation using following code

- (void)URLSession:(NSURLSession *)session didReceiveChallenge:(NSURLAuthenticationChallenge *)challenge completionHandler:(void (^)(NSURLSessionAuthChallengeDisposition, NSURLCredential * _Nullable))completionHandler {
    NSURLCredential *credential = [NSURLCredential credentialForTrust:challenge.protectionSpace.serverTrust];
    completionHandler(NSURLSessionAuthChallengeUseCredential, credential);
}

How can I do this in this component? as this issue #2649

Guide contributeur

Stack technique
react nativeobjective c
Domaine
mobilesecurity
Type d'issue
feature
DifficultéDifficulté estimée pour un nouveau contributeur, de 1 pour un très petit changement à 5 pour un travail expert.
3
Temps estiméFourchette de temps approximative pour investiguer, implémenter, tester et préparer une pull request.
1-3 hours
Statut d'activitéDisponibilité apparente de l'issue : fraîche, active, ancienne, bloquée ou en attente d'un mainteneur.
stale
ClartéClarté avec laquelle l'issue explique le changement attendu, les critères d'acceptation et la prochaine étape.
clear
Prérequis
iOS developmentObjective C or SwiftReact Native native modules
Accessibilité débutantScore de 1 à 100 estimant l'accessibilité de cette issue pour un premier contributeur.
25
Direction de recherche
Investigate the iOS native component (likely ios/RNVideo.m or ios/RNVideo.swift) to see how it manages URL requests and authentication challenges. Refer to issue #2649 for previous discussion on self signed certificates. The maintainer should evaluate whether to add a prop like allowInsecureConnections to bypass certificate validation for development. Implementation would involve adding a delegate method for didReceiveChallenge in the native module.