Is there a way to do certificate pinning on the ap...

# apollo-kotlin

[Robert Munro]

Is there a way to do certificate pinning on the apollo-kotlin ApolloClient? (i.e. with out OkHttp for multi-platform)

[mbonnin]

I don't think there's anything builtin. You'd have to do expect/actual and configure NSUrlSession /`OkHttp` separately

[Robert Munro]

ok so for multiplatform i would have to implement the HttpEngine interface and use NSUrlSession /`OkHttp` individually i guess?

[mbonnin]

Yep, that'd be the way to go

[Robert Munro]

thanks 🙂

[mbonnin]

Sure thing!

[mbonnin]

Ultimately, I think an answer to this question could be to provide a HttpEngine based on Ktor so that you can configure Ktor in a single place instead of having to configure OkHttp/NSUrlSession

[mbonnin]

(assuming Ktor supports certificate pinning but sounds like something it should support

[Robert Munro]

yes that might be a better option actually then its KMP compatible if it needs to be reused for other platforms too

[mbonnin]

We have an issue for this there https://github.com/apollographql/apollo-kotlin/issues/3796

[mbonnin]

might not be too hard to do given that we use Ktor for JS

[Robert Munro]

do you think it would be possible/good to support at the ApolloCilent.Builder level?

[Robert Munro]

as im just using the DefaultHttpEngine atm

[mbonnin]

do you think it would be possible/good to support at the ApolloCilent.Builder level?

I think we'd need something like

ApolloClient.Builder().httpEngine(ktorEngine)

[mbonnin]

Where KtorEngine is an Apollo-provided wrapper around Ktor

[Robert Munro]

yes true

[mbonnin]

Maybe it's a matter of taking the JS HttpEngine and making it available on the other platforms

[mbonnin]

Maybe there's a bit more to it, not sure