OpenAPITools / OpenAPITools/openapi-generator

[REQ] Allow ApiClient in Dart to set SecurityContext

Open
#7,237 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Enhancement: Feature
Dominant language
Java
Stars
26.8k
Forks
7.7k
PR merge metrics
PR metrics pending

Description

Is your feature request related to a problem? Please describe.

I was looking into implementing SSL Pinning in Dart. To implement that it is necessary to be able to provide a SecurityContext to the HttpClient used in the IOClient.

Describe the solution you'd like

It should be possible to pass a SecurityContext to the generated ApiClient that can be used by the Client().

Describe alternatives you've considered

Passing an HttpClient could also be an option or I would have to implement my own ApiClient to support this.

Additional context

How to do SSL pinning in flutter: https://medium.com/surfstudio/ssl-pinning-in-flutter-apps-254e01e57965

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Locate the generated Dart ApiClient and trace how it constructs or receives the IOClient and HttpClient. Read the transport setup first, then determine how a SecurityContext or HttpClient can be provided for SSL pinning. Done means the generated client can configure and use the requested security context without requiring a custom ApiClient.

Written by the indexing model from the issue text.

Assessment

Tech stack
dart
Domain
api, security
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.