Allow connection only over HTTPS in Xamarin.Android - xamarin.forms

Was trying to disable any HTTP connections in my Xamarin app.
I set flag in AndroidManifest.xml to disable clear text
android:usesCleartextTraffic="false"
Enabled TLS in "Android options" in my project. But I can still make calls to unsecured websites like
http://neverssl.com/
How can I achieve it?

Related

Nothing happens when I press Sign in Button in Office365 Outlook Email Adapter configuration in BizTalk Server 2016

We are using BizTalk Server 2016 and I installed Future Pack 3 to test the Office365 Outlook Email adapter. I wanted to create a send port and select this adapter. I press the configure button to configure adapter and in this panel, I pressed sign in button to enter my credentials. But nothing happens when I press sign in button, No frame no popup. Do you have any idea?
To use Office 365 Adapters, install BizTalk TMS.
BizTalk Server TMS is a service that refreshes the Office 365 OAuth tokens used by BizTalk. It refreshes these tokens periodically, ensuring that the tokens always remain valid. It has a dependency on Enterprise Single Sign On service (ENT SSO), and must be installed on a computer that hosts the master secret server.
Please go through this article - https://learn.microsoft.com/en-us/biztalk/core/office365-adapters
As mentioned by someone in the comments. I recreated this in my local machine and first just installed the Feature Pack 3. If I only do that, the behavior mentioned in the post was recreated.
Then I installed BizTalkTMS and it resolved the problem.
https://learn.microsoft.com/en-gb/biztalk/core/office365-adapters
One further thing that will prevent the button from working is if the server has not been configured to use TLS 1.2 in prefrence, this will also silently error.
As per BizTalk Office365 email adapter not doing anything when sign-in button is clicked
And as perarticle it links to BizTalk Server Logic App Adapter: An error occurred while making the HTTP request. This could be due to the fact that the server certificate is not configured properly with HTTP.SYS in the HTTPS case you need to make sure TLS 1.2 is enabled and SchUseStrongCrypto enabled in the registry keys
The User setting up the the port also needs to be a SSO Administrator, otherwise that will throw an error (in the Windows Events).

Can Azure websites capture custom request headers via a configuration change?

I'd like to capture custom request headers in my Azure websites but I don't have access to the website's source code (ASP.NET). I do of course have access to the web.config.
Can I capture custom request headers via a configuration change? I see that IIS allows enabling of advanced logging (https://www.iis.net/learn/extensions/advanced-logging-module/advanced-logging-for-iis-custom-logging#server_logging) which can capture custom request headers but I don't see how to do it on Azure websites.
I don't think Azure Web Sites has enabled the Advanced Logging (or Enchanced Logging) so this doesn't seem to be possible using the standard Azure logging mechanism.
But to make sure, have you tried enabling the diagnostics for your site? Especially the Web Server Logs should be interesting for you. The following Azure documentation deals with logging on Azure Web Sites.
Enable diagnostics logging for web apps in Azure App Service

Spring Tool Suite proxy authentication

java 6.0.45
STS Version: 3.4.0.RELEASE
STS Build Id: 201310051614
Windows 7
I just downloaded the latest Spring Source Toolsuite, I'm behind a proxy so I'm trying to configure the proxy authentication under preferences. I hit apply & ok, try to access the internet via File -> New -> Spring Starter Project I get a 407 error.
When I go back to the proxy preferences the user/password is empty.
Does anybody know how to configure proxy settings? Somwehere in the .metadata directory somewhere maybe?
Yeah it was frustrating. On a slight tangent, you may run into this issue of not being able to get out to the Internet soon. If you are behind a proxy, you want to go to window -> properties, search for proxy and switch to "manual" update the HTTP and HTTPS and clear the SOCKS entries (no values).This should enable STS to get through the proxy immediately. Apparently, this issue has more to do with Eclipse in STS rather than STS itself.
You can configure proxy settings in Internet Options in Control Panel. Just click on Connections tab and LAN Settings button. Check Use a proxy server for your LAN (...) box and provide proxy details. Then go to Spring Tool Suite window and click on Window >> Preferences >> General >> Network Connections and choose Native from the Active Provider drop down list.
Kepler had same issue:
After I changed my password in secure storage under preferences-> Security -> Secure Storage,
It finally let me store my username and password.
I somehow believe it has to do with corporate security desktop integration.

Where does WWW-Authenticate header get added when using WindowsAuthenticationModule

If I set Windows Authentication to true in IIS7 and set Anonymous Authentication to false, I will get a WWW-Authenticate header. I assume this is the cue to the browser to popup the authentication dialog. I'm trying to figure out where in the ASP.NET pipeline the WWW-Authenticate header gets set (and what class is responsible for setting it it). I've done quite a bit of Googling and looking at WindowsAuthenticationModule and UrlAuthorizationModule in reflector but can't seem to pinpoint it!
Several modules in IIS 7 perform tasks related to security in the request-processing pipeline. In addition, there are separate modules for each of the authentication schemes, which enable you to select modules for the types of authentication you want on your server.
The one you are looking for is the WindowsAuthenticationModule, which performs NTLM integrated authentication. It is located in Inetsrv\Authsspi.dll.
The picture below shows the HTTP request processing pipeline mechanism of IIS7.
For a complete in-depth elaboration, including the above material, visit: http://learn.iis.net/page.aspx/101/introduction-to-iis-7-architecture/
That should answer all your questions :-)
If you have Windows Authentication set in IIS the authentication will occur between the client and IIS.
.NET may access the details when is set in the web.config but IIS sends the WWW-Authenticate header and manages credential exchange.
See more:
https://www.owasp.org/index.php/Authentication_In_IIS
http://msdn.microsoft.com/en-us/library/ff647405.aspx

Asp.net and android webview problem

My IIS server requires authentication to access the localserver
this is causing android WebView component to get 403 error once directed the the url
if I uncheck Basic Authentication under Directory found in
Computer Management -> Web Sites -> Properties
I would receive 403 error(Access Denied) this time including my browser
once I restart my computer
How do I disable authentication without losing access to it?
if this is not possible
Is there a way to allow android WebView enter the username and password
automatically to prevent 403 error?
You need to handle Basic Auth in WebView: How to handle Basic Authentication in WebView

Resources