| /* |
| * Copyright (C) 2015 The Android Open Source Project |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| |
| package android.security.net.config; |
| |
| import android.content.Context; |
| import android.content.pm.ApplicationInfo; |
| import android.util.Log; |
| import android.util.Pair; |
| |
| import java.util.Set; |
| |
| /** @hide */ |
| public class ManifestConfigSource implements ConfigSource { |
| private static final boolean DBG = true; |
| private static final String LOG_TAG = "NetworkSecurityConfig"; |
| |
| private final Object mLock = new Object(); |
| private final Context mContext; |
| private final ApplicationInfo mApplicationInfo; |
| |
| private ConfigSource mConfigSource; |
| |
| public ManifestConfigSource(Context context) { |
| mContext = context; |
| // Cache the info because ApplicationInfo is mutable and apps do modify it :( |
| mApplicationInfo = new ApplicationInfo(context.getApplicationInfo()); |
| } |
| |
| @Override |
| public Set<Pair<Domain, NetworkSecurityConfig>> getPerDomainConfigs() { |
| return getConfigSource().getPerDomainConfigs(); |
| } |
| |
| @Override |
| public NetworkSecurityConfig getDefaultConfig() { |
| return getConfigSource().getDefaultConfig(); |
| } |
| |
| private ConfigSource getConfigSource() { |
| synchronized (mLock) { |
| if (mConfigSource != null) { |
| return mConfigSource; |
| } |
| int configResource = mApplicationInfo.networkSecurityConfigRes; |
| ConfigSource source; |
| if (configResource != 0) { |
| boolean debugBuild = |
| (mApplicationInfo.flags & ApplicationInfo.FLAG_DEBUGGABLE) != 0; |
| if (DBG) { |
| Log.d(LOG_TAG, "Using Network Security Config from resource " |
| + mContext.getResources() |
| .getResourceEntryName(configResource) |
| + " debugBuild: " + debugBuild); |
| } |
| source = new XmlConfigSource(mContext, configResource, mApplicationInfo); |
| } else { |
| if (DBG) { |
| Log.d(LOG_TAG, "No Network Security Config specified, using platform default"); |
| } |
| // the legacy FLAG_USES_CLEARTEXT_TRAFFIC is not supported for Ephemeral apps, they |
| // should use the network security config. |
| boolean usesCleartextTraffic = |
| (mApplicationInfo.flags & ApplicationInfo.FLAG_USES_CLEARTEXT_TRAFFIC) != 0 |
| && !mApplicationInfo.isInstantApp(); |
| source = new DefaultConfigSource(usesCleartextTraffic, mApplicationInfo); |
| } |
| mConfigSource = source; |
| return mConfigSource; |
| } |
| } |
| |
| private static final class DefaultConfigSource implements ConfigSource { |
| |
| private final NetworkSecurityConfig mDefaultConfig; |
| |
| DefaultConfigSource(boolean usesCleartextTraffic, ApplicationInfo info) { |
| mDefaultConfig = NetworkSecurityConfig.getDefaultBuilder(info) |
| .setCleartextTrafficPermitted(usesCleartextTraffic) |
| .build(); |
| } |
| |
| @Override |
| public NetworkSecurityConfig getDefaultConfig() { |
| return mDefaultConfig; |
| } |
| |
| @Override |
| public Set<Pair<Domain, NetworkSecurityConfig>> getPerDomainConfigs() { |
| return null; |
| } |
| } |
| } |