Permit "http" on iOS

Matt_Hill · November 13, 2022, 11:36pm

Feature name

http support for iOS app

Feature function

currently, the iOS app requires https. When connecting to a .onion Bitwarden server, https is not needed for security. In fact it is discouraged.
Start9 has thousands of users that run their own Bitwarden server over Tor and would like to use the Bitwarden native app to connect to their servers.
Now that iOS has Orbot (global socks5 proxy), it is no longer necessary for the Bitwarden app to support Tor natively. Closes Tor Support for iOS and Android

garyKrause · December 31, 2022, 11:42am

From a quick search through, I believe the change could be made here with a simple check for a prefix of “http://” and a suffix of “.onion”

github.com

bitwarden/mobile/blob/79a76c46385d61fad6d707561035d15c0771d15e/src/Core/Services/EnvironmentService.cs#L122


      
                      return urls;
                  }
          
          
        private string FormatUrl(string url)
                  {
                      if (string.IsNullOrWhiteSpace(url))
                      {
                          return null;
                      }
                      url = Regex.Replace(url, "\\/+$", string.Empty);
                      if (!url.StartsWith("http://") && !url.StartsWith("https://"))
                      {
                          url = string.Concat("https://", url);
                      }
                      return url.Trim();
                  }
              }
          }

bitnado · January 23, 2023, 5:39am

You also need to deal with ATS. Need to set “NSAllowsArbitraryLoads” to true in the Info.plist

If this key is not set, iOS will reject any http connection attempts.

You can see Element for iOS have done it here