Skip to content

fix: Remove certificate pinning and simplify session handling#24

Merged
lazzurs merged 1 commit intomainfrom
fix/login-flow-again
Mar 2, 2026
Merged

fix: Remove certificate pinning and simplify session handling#24
lazzurs merged 1 commit intomainfrom
fix/login-flow-again

Conversation

@lazzurs
Copy link
Contributor

@lazzurs lazzurs commented Mar 2, 2026

  • Delete custom certificate pinning logic from CopilotSessionAPI.swift
  • Use standard URLSession with default server trust validation
  • Update GitHubSessionDelegate to only perform basic trust checks
  • Simplify GitHubWebAuthClient to use nonPersistent WKWebView session
  • Restrict WebKit navigation to GitHub domains only
  • Remove unused cookie clearing and retry logic in WebAuth flow
  • Improve comments and debug logging for authentication steps

- Delete custom certificate pinning logic from CopilotSessionAPI.swift
- Use standard URLSession with default server trust validation
- Update GitHubSessionDelegate to only perform basic trust checks
- Simplify GitHubWebAuthClient to use nonPersistent WKWebView session
- Restrict WebKit navigation to GitHub domains only
- Remove unused cookie clearing and retry logic in WebAuth flow
- Improve comments and debug logging for authentication steps
@lazzurs lazzurs merged commit 2b7d477 into main Mar 2, 2026
3 checks passed
@lazzurs lazzurs deleted the fix/login-flow-again branch March 2, 2026 00:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant