Jon Vanvik
6bb65d2aa3
Parity with the Android client: drop the "Allow self-signed certificate" escape hatch. The app now performs system TLS trust only — a self-signed appliance must have its CA installed on the device (MDM/profile). A code-only public-key pinning policy remains (no UI). - ServerTrustEvaluator: remove ServerTrustPolicy.allowSelfSignedForHost and its challenge handler; keep .system (default) and .pinPublicKeySHA256. - SettingsView: remove the self-signed toggle/state/prefill; makeConfig uses the default .system policy. - MCMSConnection / APIConfiguration: update usage-sketch + doc comments. - README / GUI-NOTES / MCMS_API.md: document system-trust-only; self-signed boxes need their CA installed on the device. - Add CHANGELOG.md for this session, flagged for the Android port. Note: configs previously persisted with the self-signed policy fail to decode and reset to defaults (one-time re-entry of the server URL). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
69 lines
2.7 KiB
Swift
69 lines
2.7 KiB
Swift
import Foundation
|
|
|
|
/// Connection configuration for the MCMS REST API.
|
|
///
|
|
/// This is intentionally URL-driven so the same build works whether you hit the
|
|
/// PON Controller **directly** or through a **reverse proxy** — the only thing
|
|
/// that changes is `baseURL` (and possibly `refererOverride` / cookie names).
|
|
///
|
|
/// Direct example: `https://10.2.10.29/api`
|
|
/// Proxy example: `https://mcms.internal.example.com` (proxy forwards to /api)
|
|
///
|
|
/// NOTE: confirm the exact prefix (`/api/v1` vs `/v1`) against the shipped
|
|
/// `openapi.json` before shipping. `apiVersion` is applied per-request by the
|
|
/// endpoint builder, so it is kept separate from `baseURL`.
|
|
struct APIConfiguration: Equatable, Codable {
|
|
|
|
/// Scheme + host (+ optional port) + any fixed path prefix, WITHOUT the
|
|
/// version segment. e.g. `https://10.2.10.29/api`
|
|
var baseURL: URL
|
|
|
|
/// API version segment inserted after `baseURL`. Endpoints are versioned
|
|
/// independently; default to v1 and override per-call where needed.
|
|
var apiVersion: String = "v1"
|
|
|
|
/// The MCMS database to select for the session (optional). When non-nil the
|
|
/// client issues `PUT /v{n}/databases/selection/` after login.
|
|
var databaseId: String?
|
|
|
|
/// Value sent in the `Referer` header. The API uses this to identify the
|
|
/// calling client. Defaults to `baseURL` when nil. Behind a proxy you may
|
|
/// need to set this to the proxy's public origin.
|
|
var refererOverride: String?
|
|
|
|
/// Cookie names returned by the server on login. These match a standard
|
|
/// Django/DRF backend, which is what the CSRF + `Referer` requirements
|
|
/// imply — but verify against a real login response and override if needed.
|
|
var sessionCookieName: String = "sessionid"
|
|
var csrfCookieName: String = "csrftoken"
|
|
|
|
/// How to treat the server's TLS certificate. Defaults to system trust; the
|
|
/// app has no self-signed bypass, so a self-signed box needs its CA installed
|
|
/// on the device (MDM/profile). See `ServerTrustEvaluator`.
|
|
var trustPolicy: ServerTrustPolicy = .system
|
|
|
|
/// Request timeout (seconds).
|
|
var timeout: TimeInterval = 30
|
|
|
|
init(
|
|
baseURL: URL,
|
|
apiVersion: String = "v1",
|
|
databaseId: String? = nil,
|
|
refererOverride: String? = nil,
|
|
trustPolicy: ServerTrustPolicy = .system
|
|
) {
|
|
self.baseURL = baseURL
|
|
self.apiVersion = apiVersion
|
|
self.databaseId = databaseId
|
|
self.refererOverride = refererOverride
|
|
self.trustPolicy = trustPolicy
|
|
}
|
|
|
|
/// The value to send in the `Referer` header.
|
|
var refererValue: String {
|
|
refererOverride ?? baseURL.absoluteString
|
|
}
|
|
|
|
/// Host used for trust pinning / cookie scoping.
|
|
var host: String { baseURL.host ?? "" }
|
|
}
|