How to achieve Public Key Pinning in Flutter.

[Shashvat1]

Is it possible to achieve Public Key Pinning with Flutter?

[maheshj01]

Hello @Shashvat1. Thanks for filing the issue. I believe It should be possible with built in HttpClient from dart:io

I haven't checked the correctness of this code

import 'dart:convert';
import 'dart:io';

void main() async {
  HttpClient client = HttpClient()
    ..badCertificateCallback = (X509Certificate cert, String host, int port) {
      const allowedPublicKey =
          "your_public_key_here";
      return cert.pem.contains(allowedPublicKey);
    };

  final request = await client.getUrl(Uri.parse('https://your-secure-api.com'));
  final response = await request.close();
  final responseBody = await response.transform(utf8.decoder).join();

  print(responseBody);
}

There are also some other libraries from pub such as Dio or http_certificate_pinning which should help.

[github-actions]

This thread has been automatically locked since there has not been any recent activity after it was closed. If you are still experiencing a similar issue, please open a new bug, including the output of flutter doctor -v and a minimal reproduction of the issue.