You're Invited:Meet the Socket Team at BlackHat and DEF CON in Las Vegas, Aug 4-6.RSVP
Socket
Book a DemoInstallSign in
Socket

react-native-websocket-self-signed

Package Overview
Dependencies
Maintainers
1
Versions
6
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

react-native-websocket-self-signed

provides support for secure WebSocket (wss://) connections with self-signed certificates. This package allows developers to seamlessly establish secure WebSocket communication in their React Native applications, even when using self-signed SSL/TLS certifi

0.2.1
Source
npmnpm
Version published
Weekly downloads
323
308.86%
Maintainers
1
Weekly downloads
 
Created
Source

react-native-websocket-self-signed

MIT License Package Version CI GitHub Repo stars

This package provides support for establishing WebSocket (wss://) connections in React Native applications while bypassing SSL/TLS certificate validation. It allows developers to create secure WebSocket connections with self-signed certificates by explicitly bypassing the standard certificate validation process. This is particularly useful in development environments or internal applications where self-signed certificates are used, and strict certificate validation is not required.

⚠️ Security Warning ⚠️

🚨 Bypassing SSL/TLS certificate validation can introduce significant security risks, including exposure to Man-in-the-Middle (MITM) attacks.

🔒 This package should only be used in development environments or controlled internal applications where security risks are minimal.

❌ Do NOT use this package in production environments where data security is critical. The potential for sensitive information to be intercepted is high. Always prioritize using proper SSL/TLS certificate validation in production settings.

Installation

npm install react-native-websocket-self-signed

OPTIONAL: Disable expo-dev-client Network Inspector

If you are building an iOS Expo development build and want to use ths library in the development environment, you need to disable expo-dev-client's network inspector because it is intercepting network requests. Note that the network inspector is automatically disabled on production builds and so this library would function properly on production builds without following process

  • Install expo-build-properties
npx expo install expo-build-properties
  • Add the following plugin configuration to your app.json
{
  "expo": {
    "plugins": [
      [
        "expo-build-properties",
        {
          "ios": {
            "networkInspector": false
          }
        }
      ]
    ]
  }
}
  • Run prebuild to update native files
npx expo prebuild

Usage

import WebSocketWithSelfSignedCert from 'react-native-websocket-self-signed';

const wsWithSelfSignedCert = new WebSocketWithSelfSignedCert();
const targetWebSocket = 'wss://example.com';

 wsWithSelfSignedCert.onOpen(() => {
      console.log('WebSocket connection opened');
    });

  wsWithSelfSignedCert.onMessage((message: string) => {
    console.log('Received message:', message);
  });

  wsWithSelfSignedCert.onBinaryMessage((data: Uint8Array) => {
    console.log('Received binary data');
    const base64String = `data:image/jpeg;base64,${data}`;
  });

  wsWithSelfSignedCert.onClose(() => {
    console.log('WebSocket connection closed');
  });

  wsWithSelfSignedCert.onError((err: string) => {
    console.log('Error state updated:', `Failed to connect: ${err}`);
  });

  wsWithSelfSignedCert
    .connect(targetWebSocket)
    .then((data) => {
      console.log('Connected to WebSocketWithSelfSignedCert', data);
    })
    .catch((err) => {
      console.error('Failed to connect: ' + err);
    });

  return () => {
    wsWithSelfSignedCert.close();
  };


wsWithSelfSignedCert.send("message"));

You can check this whole example here.

To run the example, start the WebSocket server by following the instructions provided in WEB_SOCKET_SERVER_FOR_DEV.md.

Contributing

See the contributing guide to learn how to contribute to the repository and the development workflow.

License

MIT

Made with create-react-native-library

Keywords

react-native

FAQs

Package last updated on 16 Dec 2024

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts