@capgo/capacitor-ssl-pinning

CapacitorHttp integration

Native pinning is applied automatically to CapacitorHttp requests once CapacitorHttp.enabled and SSLPinning.certs are configured.

Bundled certificate workflow

Declare certificate files in capacitor.config.* and the plugin copies them into webDir/certs during bunx cap sync.

Selective bypass rules

Use excludedDomains for hosts like analytics or third-party SDK endpoints that should not be pinned.

Cross-platform native enforcement

Android uses a pinned SSLSocketFactory, while iOS installs a pinned URLSession delegate for Capacitor networking.

Inspection helpers

Verify what native configuration is active with getConfiguration() and getPluginVersion().

Comprehensive setup guide

Start with the Getting Started guide to configure certificates and ship safely.