{"action":"created","issue":{"url":"https://api.github.com/repos/meteor/meteor/issues/6280","repository_url":"https://api.github.com/repos/meteor/meteor","labels_url":"https://api.github.com/repos/meteor/meteor/issues/6280/labels{/name}","comments_url":"https://api.github.com/repos/meteor/meteor/issues/6280/comments","events_url":"https://api.github.com/repos/meteor/meteor/issues/6280/events","html_url":"https://github.com/meteor/meteor/issues/6280","id":135116568,"number":6280,"title":"Add support for new iOS security declarations in mobile-config.js / App.accessRule","user":{"login":"jmanos3","id":7502546,"avatar_url":"https://avatars.githubusercontent.com/u/7502546?v=3","gravatar_id":"","url":"https://api.github.com/users/jmanos3","html_url":"https://github.com/jmanos3","followers_url":"https://api.github.com/users/jmanos3/followers","following_url":"https://api.github.com/users/jmanos3/following{/other_user}","gists_url":"https://api.github.com/users/jmanos3/gists{/gist_id}","starred_url":"https://api.github.com/users/jmanos3/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jmanos3/subscriptions","organizations_url":"https://api.github.com/users/jmanos3/orgs","repos_url":"https://api.github.com/users/jmanos3/repos","events_url":"https://api.github.com/users/jmanos3/events{/privacy}","received_events_url":"https://api.github.com/users/jmanos3/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/meteor/meteor/labels/feature","name":"feature","color":"02d7e1"},{"url":"https://api.github.com/repos/meteor/meteor/labels/Project:Mobile","name":"Project:Mobile","color":"5319e7"}],"state":"open","locked":false,"assignee":{"login":"martijnwalraven","id":54485,"avatar_url":"https://avatars.githubusercontent.com/u/54485?v=3","gravatar_id":"","url":"https://api.github.com/users/martijnwalraven","html_url":"https://github.com/martijnwalraven","followers_url":"https://api.github.com/users/martijnwalraven/followers","following_url":"https://api.github.com/users/martijnwalraven/following{/other_user}","gists_url":"https://api.github.com/users/martijnwalraven/gists{/gist_id}","starred_url":"https://api.github.com/users/martijnwalraven/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/martijnwalraven/subscriptions","organizations_url":"https://api.github.com/users/martijnwalraven/orgs","repos_url":"https://api.github.com/users/martijnwalraven/repos","events_url":"https://api.github.com/users/martijnwalraven/events{/privacy}","received_events_url":"https://api.github.com/users/martijnwalraven/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/meteor/meteor/milestones/8","html_url":"https://github.com/meteor/meteor/milestones/Release%201.3","labels_url":"https://api.github.com/repos/meteor/meteor/milestones/8/labels","id":1456857,"number":8,"title":"Release 1.3","description":"","creator":{"login":"benjamn","id":5750,"avatar_url":"https://avatars.githubusercontent.com/u/5750?v=3","gravatar_id":"","url":"https://api.github.com/users/benjamn","html_url":"https://github.com/benjamn","followers_url":"https://api.github.com/users/benjamn/followers","following_url":"https://api.github.com/users/benjamn/following{/other_user}","gists_url":"https://api.github.com/users/benjamn/gists{/gist_id}","starred_url":"https://api.github.com/users/benjamn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/benjamn/subscriptions","organizations_url":"https://api.github.com/users/benjamn/orgs","repos_url":"https://api.github.com/users/benjamn/repos","events_url":"https://api.github.com/users/benjamn/events{/privacy}","received_events_url":"https://api.github.com/users/benjamn/received_events","type":"User","site_admin":false},"open_issues":37,"closed_issues":235,"state":"open","created_at":"2015-12-11T23:35:25Z","updated_at":"2016-03-24T02:34:01Z","due_on":null,"closed_at":null},"comments":1,"created_at":"2016-02-20T20:23:18Z","updated_at":"2016-03-24T03:05:35Z","closed_at":null,"body":"For mobile configuration, the App.accessRule functionality needs to enhanced to support the new whitelisting directions for iOS.\r\n\r\nAccording to Cordova whitelisting guide:\r\n\r\n> iOS Whitelisting\r\n> The allow-intent and allow-navigation tags are new for cordova-ios 4.x and greater, see the cordova-plugin-whitelist documentation for details. cordova-ios version 4.0 and greater does not require the cordova-plugin-whitelist plugin to be installed.\r\n> \r\n\r\nIt is my understanding that App.accessRule in mobile-config.js transforms into <access origin> in the config.xml.  One possible option would be to add both <access origin> and <allow-navigation> declarations for a single App.accessRule statement.\r\n\r\nI have a Meteor app that utilizes the Braintree drop-in UI plugin for payment processing. The drop-in UI uses an iFrame.\r\n\r\nIn Meteor 1.2.1, all works fine for.  However, I just tested the app with Meteor 1.3 beta 11 and found that without adding the allow-navigation directive manually to the config.xml of the cordova project, the Braintree drop-in UI would not function properly on iOS. It does work properly on Android."},"comment":{"url":"https://api.github.com/repos/meteor/meteor/issues/comments/200633550","html_url":"https://github.com/meteor/meteor/issues/6280#issuecomment-200633550","issue_url":"https://api.github.com/repos/meteor/meteor/issues/6280","id":200633550,"user":{"login":"skirunman","id":3936669,"avatar_url":"https://avatars.githubusercontent.com/u/3936669?v=3","gravatar_id":"","url":"https://api.github.com/users/skirunman","html_url":"https://github.com/skirunman","followers_url":"https://api.github.com/users/skirunman/followers","following_url":"https://api.github.com/users/skirunman/following{/other_user}","gists_url":"https://api.github.com/users/skirunman/gists{/gist_id}","starred_url":"https://api.github.com/users/skirunman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/skirunman/subscriptions","organizations_url":"https://api.github.com/users/skirunman/orgs","repos_url":"https://api.github.com/users/skirunman/repos","events_url":"https://api.github.com/users/skirunman/events{/privacy}","received_events_url":"https://api.github.com/users/skirunman/received_events","type":"User","site_admin":false},"created_at":"2016-03-24T03:05:35Z","updated_at":"2016-03-24T03:05:35Z","body":"Hi @martijnwalraven. We can not get the right syntax to work in mobile-config.js. We have a mobile app that uses a custom oauth we wrote for salesforce.com that was working great on our Cordova mobile app with Meteor 1.1.x and 1.2.x. With 1.3-x we can not access the salesforce oauth servers. I tried a bunch combinations. We need a wildcard for all salesforce.com subdomains. I thought this syntax should work as per Cordova whitelist documentation:\r\n```\r\nApp.accessRule('https://*.salesforce.com', {\r\n  'minimum-tls-version': 'TLSv1.0',\r\n  'requires-forward-secrecy': false,\r\n});\r\n```\r\nbut also tried `https://*.salesforce.com/*`, `*.salesforce.com`, and `*.salesforce.*`, but in all cases getting errors `CFNetwork SSLHandshake failed (-9824)` and `NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9824)`.\r\n\r\nThis happens on both IOS simulator and IOS device with either local server or running on a remote staging server. In all cases we are building for development purposes. \r\n\r\nI also know there was another change to make force_ssl only be included in production. Our oauth requires SSL for authentication even in development so hoping this is not a contributing issue. \r\n\r\nCan you point me to the docs on the exact syntax for this?\r\n\r\nThanks!"}}