How To Change Domain_6 Name On Mobile App

Configure Accessible Domains for Your Mobile App

Last updated
Save as PDF

Template:OutSystems/Documentation_KB/ContentCollaboration

Edit

To enhance your mobile app's security, you can create a whitelist of domains that your mobile app can access. The access extended configuration entry allows you to define the whitelist. After this, when using HTTP connections, all non-whitelisted domains will be blocked.

To define the list of accessible domains for your mobile app do the following:

In Service Studio, select the module element (root item in the module tree), next in the properties editor, double-click on Extensibility Configurations. This opens the property editor window:
Add new entries following the JSON template to configure the allowed domains and sub-domains for your mobile app. If you have already defined extensibility configurations previously, make any necessary adjustments. Each entry must have at least an origin field containing the allowed URL schema and the allowed domain or sub-domains, you can use wildcards.

In the next example below, the first entry will allow the mobile app to communicate with assets.mycompany.com using HTTP, while the second entry will allow the app to connect to all the sub-domains of google.com. All HTTP connections to any other domains will be blocked.
```
                  {     "access": [{         "origin": "http://assets.mycompany.com"     },{         "origin": "http://*.google.com"     }] }                                  
```
After defining the domains that are accessible, users must install an updated build of the mobile app on their devices for the changes to take effect.

Default Configuration

When no access JSON extensibility configuration entry is defined, the accessible domains by default, match the result of defining an entry with the following single list element:

{     "access": [{         "origin": "*"     }] }

In other words, by default all domains are accessible, regardless of the exact protocol (HTTP or HTTPS) and domain name.

Blocking HTTP Connections

Using extended configuration entries to limit the domains that are accessible is useful when using HTTP connections. Since all domains accessed through HTTPS are already using a secure transport channel, when using HTTPS your application will be able to access any domains. To define limitations to the content that is loaded when using HTTPS connections, consider using Content Security Policy directives.

To block all HTTP connections (to any domain), use a configuration similar to the next example:

{     "access": [{         "origin": "https://*/*"     }] }

In the previous example, by declaring that the only allowed origin must have an HTTPS protocol (regardless of the exact domain and URL), you will be effectively blocking all HTTP connections to every domain.

Optional Fields

Applies only to iOS.

The only mandatory field in each list element (for both iOS and Android) is the origin field containing the allowed URL schema and domain. If this field is missing, your mobile app will not be generated successfully.

The following table lists the other available optional fields, for specific iOS configurations:

Field Name	Applies to	Allowed Origin Values	Default Value
`minimum-tls-version`	iOS 9+	Any	`TLSv1.2`
`requires-forward-secrecy`	iOS 9+	Any	`true`
`requires-certificate-transparency`	iOS 10+	Any	`false`
`allows-arbitrary-loads-for-media`	iOS 10+	`*`	`false`
`allows-arbitrary-loads-in-web-content`	iOS 10+	`*`	`false`
`allows-local-networking`	iOS 10+	`*`	`false`

Note that the last three fields can only be included in an access list element whose origin field contains an * value.

Check the relevant Cordova (Domain Whitelist Guide) and Apple (App Transport Security) documentation topics for more information on these fields.

Accessible Domains JSON Template

{     "access": [         // Use the entries below to define which domains your mobile app can connect to         {             "origin": "<Protocol and URL of accessible domain>",             "minimum-tls-version": "<Minimum required TLS version>",             "requires-forward-secrecy": "<true_or_false>",             "requires-certificate-transparency": "<true_or_false>"         },         // use the following template to set these three iOS-only fields         {             "origin": "*",             "allows-arbitrary-loads-for-media": "<true_or_false>",             "allows-arbitrary-loads-in-web-content": "<true_or_false>",             "allows-local-networking": "<true_or_false>"         }     ] }

How To Change Domain_6 Name On Mobile App

Source: https://success.outsystems.com/Documentation/11/Delivering_Mobile_Apps/Customize_Your_Mobile_App/Configure_Accessible_Domains_for_Your_Mobile_App

Posted by: farrersawles93.blogspot.com