ATS on iOS9

Solar2D iOS
#1

Does anyone know if the changes to enforce App Transport Security in iOS9 will affect Corona Apps?

http://ste.vn/2015/06/10/configuring-app-transport-security-ios-9-osx-10-11/

From reading this I can’t see why they wouldn’t.

Are any of the plugin services affected?

-Mike

#2

ATS definitely applies to Corona-built apps (including their plugins) for iOS 9.

We’ll have a guide soon. For now, you can edit your build.settings to inject the right settings into the generated Info.plist.

Apple has a list of settings here: https://developer.apple.com/library/prerelease/ios/technotes/App-Transport-Security-Technote/

This will let you configure the specific domains you need to exclude:

[lua]settings =
{
    iphone =
    {
        plist =
        {
            NSAppTransportSecurity =
            {
                NSExceptionDomains =
                {
                    [“your.domain.name”] =
                    {
                        – Settings here for this domain
                    },
                },
            },
        },
    },
}[/lua]

And this will let you exclude everything. Apple doesn’t recommend this.
[lua]settings =
{
    iphone =
    {
        plist =
        {
            NSAppTransportSecurity =
            {
                NSAllowsArbitraryLoads = true,
            },
        },
    },
}[/lua]

#3

Does it affect apps built with iOS 9 SDK or all apps regardless of iOS SDK running on devices with iOS 9? 

#4

No, the app has to be built targeting 9.0. A normal app built using the iOS 8.4 SDK will not be affected by ATS.  But once you rebuild it for 9.0 it will be.

#5

Thanks for the clarification. 

#6

ATS definitely applies to Corona-built apps (including their plugins) for iOS 9.

We’ll have a guide soon. For now, you can edit your build.settings to inject the right settings into the generated Info.plist.

Apple has a list of settings here: https://developer.apple.com/library/prerelease/ios/technotes/App-Transport-Security-Technote/

This will let you configure the specific domains you need to exclude:

[lua]settings =
{
    iphone =
    {
        plist =
        {
            NSAppTransportSecurity =
            {
                NSExceptionDomains =
                {
                    [“your.domain.name”] =
                    {
                        – Settings here for this domain
                    },
                },
            },
        },
    },
}[/lua]

And this will let you exclude everything. Apple doesn’t recommend this.
[lua]settings =
{
    iphone =
    {
        plist =
        {
            NSAppTransportSecurity =
            {
                NSAllowsArbitraryLoads = true,
            },
        },
    },
}[/lua]

#7

Does it affect apps built with iOS 9 SDK or all apps regardless of iOS SDK running on devices with iOS 9? 

#8

No, the app has to be built targeting 9.0. A normal app built using the iOS 8.4 SDK will not be affected by ATS.  But once you rebuild it for 9.0 it will be.

#9

Thanks for the clarification.