mirror of
https://github.com/oxen-io/session-ios.git
synced 2023-12-13 21:30:14 +01:00
87 lines
4.4 KiB
Objective-C
87 lines
4.4 KiB
Objective-C
//
|
|
// TSNetworkManager.m
|
|
// TextSecureiOS
|
|
//
|
|
// Created by Frederic Jacobs on 9/27/13.
|
|
// Copyright (c) 2013 Open Whisper Systems. All rights reserved.
|
|
//
|
|
|
|
#import <AFNetworking/AFNetworking.h>
|
|
|
|
#import "TSAccountManager.h"
|
|
#import "TSConstants.h"
|
|
#import "TSNetworkManager.h"
|
|
#import "TSRequest.h"
|
|
#import "TSRegisterWithTokenRequest.h"
|
|
#import "TSStorageManager+keyingMaterial.h"
|
|
|
|
@interface TSNetworkManager ()
|
|
|
|
@property AFHTTPSessionManager *operationManager;
|
|
|
|
@end
|
|
|
|
@implementation TSNetworkManager
|
|
|
|
#pragma mark Singleton implementation
|
|
|
|
+ (id)sharedManager {
|
|
static TSNetworkManager *sharedMyManager = nil;
|
|
static dispatch_once_t onceToken;
|
|
dispatch_once(&onceToken, ^{
|
|
sharedMyManager = [[self alloc] init];
|
|
});
|
|
return sharedMyManager;
|
|
}
|
|
|
|
- (id)init {
|
|
if (self = [super init]) {
|
|
NSURLSessionConfiguration *sessionConf = NSURLSessionConfiguration.ephemeralSessionConfiguration;
|
|
self.operationManager = [[AFHTTPSessionManager alloc] initWithBaseURL:[[NSURL alloc] initWithString:textSecureServerURL] sessionConfiguration:sessionConf];
|
|
AFSecurityPolicy *policy = [AFSecurityPolicy policyWithPinningMode:AFSSLPinningModeCertificate];
|
|
policy.allowInvalidCertificates = YES;
|
|
policy.allowInvalidCertificates = YES; //The certificate is not signed by a CA in the iOS trust store.
|
|
policy.validatesCertificateChain = NO; //Looking at AFNetworking's implementation of chain checking, we don't need to pin all certs in chain. https://github.com/AFNetworking/AFNetworking/blob/104ce04105098466ea0ea4e337af554d7b9df195/AFNetworking/AFSecurityPolicy.m#L281 Trust to the trusted cert is already vertified before by AFServerTrustIsValid();
|
|
NSString *certPath = [NSBundle.mainBundle pathForResource:@"textsecure" ofType:@"cer"];
|
|
NSData *certData = [NSData dataWithContentsOfFile:certPath];
|
|
SecCertificateRef cert = SecCertificateCreateWithData(NULL, (__bridge CFDataRef)(certData));
|
|
policy.pinnedCertificates = @[(__bridge_transfer NSData *)SecCertificateCopyData(cert)];
|
|
self.operationManager.securityPolicy = policy;
|
|
}
|
|
return self;
|
|
}
|
|
|
|
#pragma mark Manager Methods
|
|
|
|
- (void) queueAuthenticatedRequest:(TSRequest*) request success:(void (^)(NSURLSessionDataTask *task, id responseObject))success failure:(void (^)(NSURLSessionDataTask *task, NSError *error))failure {
|
|
if ([request isKindOfClass:[TSRegisterWithTokenRequest class]]){
|
|
// We plant the Authorization parameter ourselves, no need to double add.
|
|
self.operationManager.requestSerializer = [AFJSONRequestSerializer serializer];
|
|
[self.operationManager.requestSerializer setAuthorizationHeaderFieldWithUsername:((TSRegisterWithTokenRequest*)request).numberToValidate password:[request.parameters objectForKey:@"AuthKey"]];
|
|
|
|
[request.parameters removeObjectForKey:@"AuthKey"];
|
|
|
|
[self.operationManager PUT:[textSecureServerURL stringByAppendingString:request.URL.absoluteString] parameters:request.parameters success:success failure:failure];
|
|
}
|
|
else{
|
|
// For all other equests, we do add an authorization header
|
|
self.operationManager.requestSerializer = [AFJSONRequestSerializer serializer];
|
|
self.operationManager.responseSerializer = [AFJSONResponseSerializer serializer];
|
|
|
|
[self.operationManager.requestSerializer setAuthorizationHeaderFieldWithUsername:[TSAccountManager registeredNumber] password:[TSStorageManager serverAuthToken]];
|
|
|
|
if ([request.HTTPMethod isEqualToString:@"GET"]) {
|
|
[self.operationManager GET:[textSecureServerURL stringByAppendingString:request.URL.absoluteString] parameters:request.parameters success:success failure:failure];
|
|
} else if ([request.HTTPMethod isEqualToString:@"POST"]){
|
|
[self.operationManager POST:[textSecureServerURL stringByAppendingString:request.URL.absoluteString] parameters:request.parameters success:success failure:failure];
|
|
} else if ([request.HTTPMethod isEqualToString:@"PUT"]){
|
|
[self.operationManager PUT:[textSecureServerURL stringByAppendingString:request.URL.absoluteString] parameters:request.parameters success:success failure:failure];
|
|
}
|
|
else if ([request.HTTPMethod isEqualToString:@"DELETE"]){
|
|
[self.operationManager DELETE:[textSecureServerURL stringByAppendingString:request.URL.absoluteString] parameters:request.parameters success:success failure:failure];
|
|
}
|
|
}
|
|
}
|
|
|
|
|
|
@end
|