c2c4ed22e3
SSL pinning (all 4 apps): IOClient import, subdomain-safe domain matching Root detection (all 4 apps): modern Magisk/KernelSU/APatch paths Security checks (rider/driver/admin): PlatformException -> false Rider crud: 60s timeout, 3 retries, exponential backoff, JWT pre-validation Driver crud: exponential backoff for TimeoutException RxInt compile (rider/driver): 10.obs -> RxInt(10) Admin device_info: add missing imports, fix RxInt, add package_info_plus
43 lines
1.3 KiB
Dart
43 lines
1.3 KiB
Dart
import 'dart:convert';
|
|
import 'dart:io';
|
|
import 'package:crypto/crypto.dart';
|
|
import 'package:http/http.dart' as http;
|
|
import 'package:http/io_client.dart' as http_io;
|
|
|
|
class SslPinning {
|
|
SslPinning._();
|
|
|
|
static final Map<String, List<String>> _pins = {
|
|
'intaleq.xyz': [
|
|
'/tNRUeeLxUhQU5gbgdpVWC6QBGAqc/ujg8Kcf0wQiAM=',
|
|
'Hlx/0EWNDH5Xkt2KzvqxUzbw0vvEsyZSlibialSyGqI=',
|
|
],
|
|
'siromove.com': [
|
|
'C5+lpZ7tcVwmwQIMcRtPbsQtWLABXhQzejna0wHESsl=',
|
|
'diGVwiVYbubAI3RW4hB9xU8e/CH2GnkuvVFZE8zmgzI=',
|
|
],
|
|
};
|
|
|
|
static final List<String> _globalPins = [
|
|
'Ex/Od4QBaJmloAIDqe/IDxjrvXVYBxftwVU1gJMINuw=',
|
|
'lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=',
|
|
'aXKbjhWobvwXelevtxcd/GSt0owvyozxUH40RTzLFHA=',
|
|
];
|
|
|
|
static http.Client createPinnedClient() {
|
|
final httpClient = HttpClient()
|
|
..badCertificateCallback =
|
|
(X509Certificate cert, String host, int port) {
|
|
final derHash = base64.encode(sha256.convert(cert.der).bytes);
|
|
for (final entry in _pins.entries) {
|
|
if (host == entry.key || host.endsWith('.${entry.key}')) {
|
|
if (entry.value.contains(derHash)) return true;
|
|
}
|
|
}
|
|
if (_globalPins.contains(derHash)) return true;
|
|
return false;
|
|
};
|
|
return http_io.IOClient(httpClient);
|
|
}
|
|
}
|