search

invoiceninja / admin-portal

Invoice Ninja: Desktop/mobile admin portal built with Flutter
https://demo.invoiceninja.com
Other
1.62k stars 547 forks source link

Insecure HTTP is not allowed by platform #238

Open ghost opened 3 years ago

ghost commented 3 years ago

Hey

I'm trying the app for Android F-Droid v5.
I've invoice ninja running at home without https. I added REQUIRE_HTTPS=false to the .env file which is for invoiceninja itself I guess and has nothing to do with the app?

I get the following message:
Bad state: Insecure HTTP is not allowed by platform: http://localhost:8000/api/v1/login?first_load=true&include_static=true

Any chance to get access without the certificate?

hillelcoren commented 3 years ago

Hi,

I've looked into it, I believe it's possible but requires setting a flag when compiling the app which would affect all users.

https://stackoverflow.com/a/65730723/497368

We could probably make a special APK available as part of our CI/CD pipeline?

ghost commented 3 years ago

Yeah, I have found that too and I checked the manifest but I couldn't find it. Otherwise I can compile the apk by myself. But I'm not a dev so, I need a little help for that :/

Edit: But what is the problem to enable it for everyone? So we can choose to use http or https. If http is used by mistake, is it possible to check https first and if nothing is found at https, to use http?