react-native-ssl-public-key-pinning icon indicating copy to clipboard operation
react-native-ssl-public-key-pinning copied to clipboard

Network calls via FastImage are not being SSL Pinned

Open amanmoar277 opened this issue 9 months ago • 1 comments

In my react-native app, I want to do SSL pinning only for IOS. So, I have pinned a domain (assume aaa.bbb.com, this domain serves me the images).

I am making calls to this domain to fetch the images by two ways

  1. Directly using axios
  2. Using FastImage - https://www.npmjs.com/package/react-native-fast-image

When I run my application by putting some wrong hash. if (Platform.OS === 'ios') await initializeSslPinning({ 'aaa.bbb.com': { includeSubdomains: true, publicKeyHashes: [ 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=', 'BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=', ], } })

I can see that the calls made via axios are being pinned successfully and there is no response. But the calls made via FastImage gave back 200 StatusCode.

Is this something expected from this library because FastImage uses SDWebImage and SDWebImage is not supported by this library.

If it is supported - Is there anything wrong that I am doing in the above code? If fastImage is still not supported - Is there any plan to support this library in future?

amanmoar277 avatar May 03 '24 08:05 amanmoar277