Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

cordova-ios 6.0.0 iOS App rejection - No HTTPS access

See original GitHub issue

Hello guys, I have submitted an iOS App using WKWebView with latest cordova-ios 6.0.0 but it got rejected multiple times because they cannot Login or access our APIs through HTTPS requests. But I cannot reproduce this issue neither in the simulators nor in a real device through Test Flight distribution (we have installed the App in 3 real devices with different networks, even under VPN). I have enabled even the CORS server side, I have adapted the NSAppTransportSecurity as of below but not lack. Do you have any ideas or any suggestions? This is happening only in Apple side during their reviews.

<key>NSAppTransportSecurity</key>
<dict>
<key>NSAllowsArbitraryLoads</key>
<false/>
<key>NSAllowsArbitraryLoadsInWebContent</key>
<true/>
<key>NSExceptionDomains</key>
<dict>
  <key>{MY_DOMAIN}</key>
  <dict>
    <key>NSExceptionAllowsInsecureHTTPLoads</key>
    <true/>
    <key>NSExceptionMinimumTLSVersion</key>
    <string>TLSv1.0</string>
    <key>NSIncludesSubdomains</key>
    <true/>
  </dict>
</dict>
</dict>

Issue Analytics

State:
Created 3 years ago
Comments:7 (5 by maintainers)

Top GitHub Comments

2reactions

breautekcommented, Jun 30, 2020

The only thing that is strange that I see is I don’t think WKURLSchemeHandler plays nicely with http or https (or any other standard protocols). It’s suppose to be for defining how to handle custom schemes. That’s why the cordova blog post uses app in its example. But honestly I’m not that knowledgable with URL schemes and I don’t know if this is a source of your problem or not. I’d be kinda surprised if it was.

I can say that I have no issues with apple using my provided login for my apps, but none of my apps are on cordova-ios@6 yet. I have one app on cordova-ios@5.1.1 using the wkwebview plugin, and another app also on cordova-ios@5.1.1, but using the ionic webview (with their implementation of scheme handlers).

1reaction

NiklasMerzcommented, Jul 1, 2020

I also think you cannot use http or https or any other standard protocol as your custom scheme in the app. WKURLSchemeHandler should not allow that but I wonder why that works for you.

I am using the Ionic Webview plugin, too and that blocks these schemes. It has been a while since I played around with that setting but I will do it again probably soon. 😃