element-hq / element-hq/element-ios

Client Side Certificate Auth

Open
#1,638 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Swift
Stars
1.8k
Forks
544
PR merge metrics
PR metrics pending

Description

Due to security restrictions in some companies, the Matrix server is only accessible behind a VPN. It requires VPN to be always enabled on the phone. However, sometimes, a client side certificate auth is also available. iOS supports natively client side certificate auth for Apple apps using the main Keychain. Unfortunately, other apps can't access to this Keychain. Instead, they must implement their own certificate "keychain". It would be great to see this in Riot iOS (and Android) app !

Some references:
https://stackoverflow.com/questions/3749429/how-to-use-client-certificate-authentication-in-ios-app
https://stackoverflow.com/questions/30174052/swift-ios-client-certificate-authentication

Thanks

Contributor guide

Open the contributing guide

Research direction

The issue names no files or tests; begin by reviewing the iOS and Android authentication entry points and the two linked client-certificate references. Confirm the required certificate storage and connection behavior with maintainers, then define done as client-certificate authentication working for the stated Matrix server scenario on the supported mobile platforms.

Written by the indexing model from the issue text.

Assessment

Tech stack
swift
Domain
authentication, mobile
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.