Accessing web with HTTP auth

[janpeterka]

Hi, I'm trying to create iOS app for the first time. I'm struggling with using it with web that is behind HTTPAuth (test server).

I already solved it for Android (see discussion), but I have no idea where to start in Swift.

I'll be thankful for any pointers or references!

[sebastianbroc]

Hi, i had exactly the same problem, and accessed my server with the following code in SceneDelegate.swift:

private let authenticatedURL: URL = {
    var components = URLComponents(string: "https://your-secured-server.com/")!
    components.user = "user"
    components.password = "password"
    return components.url!
}()

class SceneDelegate: UIResponder, UIWindowSceneDelegate {
    var window: UIWindow?
    private let tabBarController = HotwireTabBarController()

    private let navigator = Navigator(configuration: .init(
        name: "main",
        startLocation: authenticatedURL
    ))

    func scene(_ scene: UIScene, willConnectTo session: UISceneSession, options connectionOptions: UIScene.ConnectionOptions)
    {
        window?.rootViewController = tabBarController
        tabBarController.load(HotwireTab.all)
        navigator.start()
    }
}

[janpeterka]

Interesting, I got another approach working (with help of this: hotwired/hotwire-native-android#167 (reply in thread)):

import HotwireNative
import UIKit

let baseURL = URL(string: "https:/my-secured-url")!

class SceneDelegate: UIResponder, UIWindowSceneDelegate {
    var window: UIWindow?
    
    private lazy var navigator = Navigator(configuration: .init(name: "main", startLocation: baseURL), delegate: self)
    
    func scene(_ scene: UIScene, willConnectTo session: UISceneSession, options connectionOptions: UIScene.ConnectionOptions) {
        window?.rootViewController = navigator.rootViewController
        navigator.start()
    }
}

extension SceneDelegate: NavigatorDelegate {
    func didReceiveAuthenticationChallenge(_ challenge: URLAuthenticationChallenge, completionHandler: @escaping (URLSession.AuthChallengeDisposition, URLCredential?) -> Void)
            {
                let user = "user"
                let password = "password"
                
                let credential = URLCredential(user: user,
                                               password: password,
                                               persistence: .permanent)
                completionHandler(.useCredential, credential)
        }
}

Yours is much simpler though, I would be interested to hear if there some benefit to either of them.

I'm guessing your approach sends the user/password in header? If it's so, would it make it more insecure? I really don't know as I have only little working knowledge of how iOS apps work