search

Jolanrensen / PermanentProxy-for-WearOS

App that will enable a defined proxy on Wear OS watches. Could be used to enable Google Pay in "unsupported countries"
59 stars 5 forks source link

Authorization needed #19

Open IvanO-20 opened 3 years ago

IvanO-20 commented 3 years ago

Thanks for the app, however, it definitely needs authorization feature. Since mobile network is toooo big, I can't add even range of all cellular operators. So I need to allow requests from any host without auth... Why it's not possible to add smth like user:pass@ipaddress ? Or even add two more fields, because standard wearOS keyboard haven't colon symbol.

Jolanrensen commented 3 years ago

This is a limitation in Wear OS / Android. Permanent Proxy only sets the System proxy setting found here: https://developer.android.com/reference/android/provider/Settings.Global#HTTP_PROXY This means that I cannot add any functionality not already present in the Wear OS system. If you want more security, use a VPN app on your phone and use only Bluetooth on the watch.

erenoglu commented 3 years ago

Related to this, does the proxy need to be available at all times, or only at watch boot? For example, I could setup a vpn at my home router to my vps in a supported country, and let the watch access it through my LAN (routed through the vpn on the router). However, when I go out of home, the proxy will no longer be reachable as it's using a LAN IP and the proxy on the vps only listens on internal IP to prevent anybody random from accessing it.

Would that work? Having a proxy open to all the world probably is not a viable solution in my case.

IvanO-20 commented 3 years ago

Well, I'm not sure what would happens if proxy is set and just unreachable, but if i use only vpn on my phone, w/o setting proxy on watch, and after i set google pay i turn off vpn, then i've found that from time to time watch is requesting update and after that are resetting my "pay" ability. In case if proxy is set but not unreachable (no internet access at all), i think "pay ability" will remains, but also not for all time, since payment tokens should be updated periodically. So, if you return back under your trusted VPN at home at least once per day, it can be solution for you (of course, if you do not need any internet connection outside).

In my case, i set allow list, added all AS of my cell operator.

Jolanrensen commented 3 years ago

Related to this, does the proxy need to be available at all times, or only at watch boot? For example, I could setup a vpn at my home router to my vps in a supported country, and let the watch access it through my LAN (routed through the vpn on the router). However, when I go out of home, the proxy will no longer be reachable as it's using a LAN IP and the proxy on the vps only listens on internal IP to prevent anybody random from accessing it.

Would that work? Having a proxy open to all the world probably is not a viable solution in my case.

While Google Pay stays working after the proxy is disconnected, this is only for a short while. It can recheck your location at any time after which it will disable Pay again.