/* ownCloud Android Library is available under MIT license * Copyright (C) 2018 ownCloud GmbH. * * Permission is hereby granted, free of charge, to any person obtaining a copy * of this software and associated documentation files (the "Software"), to deal * in the Software without restriction, including without limitation the rights * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell * copies of the Software, and to permit persons to whom the Software is * furnished to do so, subject to the following conditions: * * The above copyright notice and this permission notice shall be included in * all copies or substantial portions of the Software. * * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN * THE SOFTWARE. * */ package com.owncloud.android.lib.common.http; import android.content.Context; import java.util.concurrent.TimeUnit; import com.owncloud.android.lib.BuildConfig; import com.owncloud.android.lib.common.OwnCloudClientManagerFactory; import com.owncloud.android.lib.common.http.interceptors.HttpInterceptor; import com.owncloud.android.lib.common.http.interceptors.RequestHeaderInterceptor; import com.owncloud.android.lib.common.network.AdvancedX509TrustManager; import com.owncloud.android.lib.common.network.NetworkUtils; import com.owncloud.android.lib.common.utils.Log_OC; import java.util.Arrays; import javax.net.ssl.SSLContext; import javax.net.ssl.TrustManager; import javax.net.ssl.X509TrustManager; import okhttp3.OkHttpClient; import okhttp3.Protocol; /** * Client used to perform network operations * @author David González Verdugo */ public class HttpClient { private static final String TAG = HttpClient.class.toString(); private static OkHttpClient sOkHttpClient; private static HttpInterceptor sOkHttpInterceptor; private static Context sContext; public static void setContext(Context context) { sContext = context; } public static OkHttpClient getOkHttpClient() { if (sOkHttpClient == null) { try { final X509TrustManager trustManager = new AdvancedX509TrustManager( NetworkUtils.getKnownServersStore(sContext)); final SSLContext sslContext = SSLContext.getInstance("TLS"); sslContext.init(null, new TrustManager[] {trustManager}, null); OkHttpClient.Builder clientBuilder = new OkHttpClient.Builder() .addInterceptor(getOkHttpInterceptor()) .protocols(Arrays.asList(Protocol.HTTP_1_1)) .followRedirects(false) .sslSocketFactory(sslContext.getSocketFactory(), trustManager) .hostnameVerifier((asdf, usdf) -> true); // TODO: Not verifying the hostname against certificate. ask owncloud security human if this is ok. //.hostnameVerifier(new BrowserCompatHostnameVerifier()); sOkHttpClient = clientBuilder.build(); } catch (Exception e) { Log_OC.e(TAG, "Could not setup SSL system.", e); } } return sOkHttpClient; } private static HttpInterceptor getOkHttpInterceptor() { if (sOkHttpInterceptor == null) { sOkHttpInterceptor = new HttpInterceptor(); addHeaderForAllRequests(HttpConstants.USER_AGENT_HEADER, OwnCloudClientManagerFactory.getUserAgent()); addHeaderForAllRequests(HttpConstants.PARAM_SINGLE_COOKIE_HEADER, "true"); } return sOkHttpInterceptor; } /** * Sets the connection and wait-for-data timeouts to be applied by default to the methods * performed by this client. */ public void setDefaultTimeouts(int defaultDataTimeout, int defaultConnectionTimeout) { OkHttpClient.Builder clientBuilder = getOkHttpClient().newBuilder(); if (defaultDataTimeout >= 0) { clientBuilder .readTimeout(defaultDataTimeout, TimeUnit.MILLISECONDS) .writeTimeout(defaultDataTimeout, TimeUnit.MILLISECONDS); } if (defaultConnectionTimeout >= 0) { clientBuilder.connectTimeout(defaultConnectionTimeout, TimeUnit.MILLISECONDS); } sOkHttpClient = clientBuilder.build(); } /** * Add header that will be included for all the requests from now on * @param headerName * @param headerValue */ public static void addHeaderForAllRequests(String headerName, String headerValue) { getOkHttpInterceptor() .addRequestInterceptor( new RequestHeaderInterceptor(headerName, headerValue) ); } public static void deleteHeaderForAllRequests(String headerName) { getOkHttpInterceptor().deleteRequestHeaderInterceptor(headerName); } }