http_security_pinning 1.0.0 copy "http_security_pinning: ^1.0.0" to clipboard
http_security_pinning: ^1.0.0 copied to clipboard

An implementation of Dart's HttpClient with certificate pinning against SPKI hashes.

1.0.0 #

  • Initial public release of the http_security_pinning package.

Features

  • SPKI Pinning: Provides an HttpClient implementation that enforces certificate pinning against SPKI hashes to prevent MITM attacks.
  • Easy Integration: Works seamlessly with popular packages like http and dio.
  • Configurable: Set custom timeout and retryCount for the certificate fetching process.
  • Global Configuration: Optionally apply pinning to all HttpClient instances in your app using HttpOverrides.
  • Robust Error Handling: Provides clear, catchable exceptions (CertificateFetchException, NoValidPinsFoundException) for pinning failures.
  • Automatic Hash Logging: Logs the certificate chain's SPKI hashes to the console to simplify setup.
  • Comprehensive Testing: Includes a full integration test suite.
  • Full Documentation: Includes a detailed README, API documentation, and a complete example app.
  • Platform Support: Supports Android (API 19+) and iOS (10.0+).
0
likes
160
points
26
downloads

Publisher

unverified uploader

Weekly Downloads

An implementation of Dart's HttpClient with certificate pinning against SPKI hashes.

Repository (GitHub)
View/report issues

Documentation

API reference

License

MIT (license)

Dependencies

asn1lib, crypto, flutter, pem

More

Packages that depend on http_security_pinning

Packages that implement http_security_pinning