React Native Support

Hey, We have an android app with React Native code. React Native allow to override the default ok HTTP client for ALL network request from React Native with the following code:

        OkHttpClient client =
                    new OkHttpClient().newBuilder()
                            .sslSocketFactory(trustKit.getSSLSocketFactory("www.mycompanydomain.com"),
                                    trustKit.getTrustManager("www.mycompanydomain.com"))
                            .connectTimeout(0, TimeUnit.MILLISECONDS)
                            .readTimeout(0, TimeUnit.MILLISECONDS)
                            .writeTimeout(0, TimeUnit.MILLISECONDS)
                            .cookieJar(new ReactCookieJarContainer())
                            .build();
            OkHttpClientProvider.replaceOkHttpClient(client);

This work perfectly well, excpet for the fact that it will block all the request to API that are not belonging to my company - for example, firebase - because it will try to pin them with our domain configuration. To solve this, we can use an approach similar to what CWAC did:

• Add a method to PinningTrustManager that allow changing the domain configuration
• Use the same code above to add TrustKit PinningTrustManager to React Native client
• Add an interceptor to the client used by React Native, and change the host configuration before each request

Or we can try another approach, I am pretty open to ideas - for example, try to implement pinning in network interceptor - I will try to see if that possible. Do you encounter similar problems? What will you recommend? Thanks!

[omerlh]

Finally, I’ve used the regular OkHttp CertificatePinner. It is playing pretty well with React Native, and there is a good documentation on how to integrate it with ReactNative. I did that with a small change - I read the pinning certificates from TrustKit config, which has 2 advantages:

• Android 7 compatibility.
• Easy pinning for network requests from the native code.

I posted a sample code in a gist, it was pretty easy to set this up.

[nabla-c0d3]

Thanks for letting us know. I will check it out!