Mobile - Android accepting local imported CAs

.gitignore

@@ -3,6 +3,7 @@
 # dependencies
 node_modules
 .pnp
+.pnpm-store
 .pnp.js
 .yarn/install-state.gz
 
@@ -52,4 +53,7 @@ data
 
 # Idea
 .idea
-*.iml
+*.iml
+
+# VS-Code
+.vscode

apps/mobile/app.json

@@ -51,6 +51,7 @@
       "versionCode": 11
     },
     "plugins": [
+      "./plugins/trust-local-certs.js",
       "expo-router",
       [
         "expo-share-intent",

apps/mobile/plugins/network_security_config.xml

@@ -0,0 +1,9 @@
+<?xml version="1.0" encoding="utf-8"?>
+<network-security-config>
+    <base-config cleartextTrafficPermitted="true">
+        <trust-anchors>
+            <certificates src="system" />
+            <certificates src="user" />
+        </trust-anchors>
+    </base-config>
+</network-security-config>

apps/mobile/plugins/trust-local-certs.js

@@ -0,0 +1,43 @@
+const { AndroidConfig, withAndroidManifest } = require("@expo/config-plugins");
+const { Paths } = require("@expo/config-plugins/build/android");
+const path = require("path");
+const fs = require("fs");
+const fsPromises = fs.promises;
+
+const { getMainApplicationOrThrow } = AndroidConfig.Manifest;
+
+const withTrustLocalCerts = (config) => {
+  return withAndroidManifest(config, async (config) => {
+    config.modResults = await setCustomConfigAsync(config, config.modResults);
+    return config;
+  });
+};
+
+async function setCustomConfigAsync(config, androidManifest) {
+  const src_file_pat = path.join(__dirname, "network_security_config.xml");
+  const res_file_path = path.join(
+    await Paths.getResourceFolderAsync(config.modRequest.projectRoot),
+    "xml",
+    "network_security_config.xml",
+  );
+
+  const res_dir = path.resolve(res_file_path, "..");
+
+  if (!fs.existsSync(res_dir)) {
+    await fsPromises.mkdir(res_dir);
+  }
+
+  try {
+    await fsPromises.copyFile(src_file_pat, res_file_path);
+  } catch (e) {
+    throw e;
+  }
+
+  const mainApplication = getMainApplicationOrThrow(androidManifest);
+  mainApplication.$["android:networkSecurityConfig"] =
+    "@xml/network_security_config";
+
+  return androidManifest;
+}
+
+module.exports = withTrustLocalCerts;