Search code examples
iosapp-transport-security

iOS app API calls blocked by App Transport Security

I'm upgrading my server API calls to pass the ATS (App Transport Security) requirements from Apple. My server now has an A+ score after checking at SSL Labs.

Why does ATS still block the connection?

App Transport Security has blocked a cleartext HTTP (http://) resource load since it is insecure. Temporary exceptions can be configured via your app's Info.plist file.

How can we pass the ATS requirements? Do I need to make additional change to our server API call?

Solution

  • Seems that your app is still trying to access the server in http and not https. Have you reviewed all the urls that your app is accessing?

    Maybe your server send the application redirects to an http site?

    Try to add a breakpoint on your networking layer and review the urls you are trying access.