Angular 和 Ionic，$http 不适用于已签名的 .apk

Question

I have an ionic v1 application which was working fine, but a few weeks ago when I built new signed .apk file all $http requests just stop working.

Here is an example of request

$http({
      method: 'GET',
      url: 'https://some-url.com/user/id'
    }).then(function (response) {
        alert(response.data);
      }, function (error) {
      alert('Error ' + JSON.stringify(error));
});

I always get error callback with {data: null, status -1, headers: ...}

What is interesting that when I build simple apk or just running cordova run android everything works fine. Only not working in signed apk.

I already tried to update cordova-plugin-whitelist and added

<meta http-equiv="Content-Security-Policy" content="default-src *; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval'">

to my index.html file. Also added <allow-navigation href="*" /> to my config.xml file.

Does anyone have some ideas why this is happening? Maybe android sdk changed the way of building signed apk and I need some addintional configuration.

Answer 1

You can ignore certificate by changing the following code on the CordovaWebViewClient.java file you can find the java file in Cordova version 4 or less platforms/android/CordovaLib/src/org/apache/cordova/CordovaWebViewClient.java

or Cordova version 5 or greater platforms/android/CordovaLib/src/org/apache/cordova/engine/SystemWebViewClient.java

public void onReceivedSslError(WebView view, SslErrorHandler handler, SslError error) {
  final String packageName = this.cordova.getActivity().getPackageName();
  final PackageManager pm = this.cordova.getActivity().getPackageManager();

  ApplicationInfo appInfo;
  try {
    appInfo = pm.getApplicationInfo(packageName, PackageManager.GET_META_DATA);
    if ((appInfo.flags & ApplicationInfo.FLAG_DEBUGGABLE) != 0) {
      // debug = true
      handler.proceed();
      return;
    } else {
      // debug = false
      // THIS IS WHAT YOU NEED TO CHANGE:
      // 1. COMMENT THIS LINE
      // super.onReceivedSslError(view, handler, error);
      // 2. ADD THESE TWO LINES
      // ---->
      handler.proceed();
      return;
      // <----
    }
  } catch (NameNotFoundException e) {
    // When it doubt, lock it out!
    super.onReceivedSslError(view, handler, error);
  }
}

Hope this solution will work for you.