Merge pull request #359 from mjuen/master

Allow custom SSL socket factory for BaseHttpAuthClient

Author: Keith-wright

src/main/java/com/pusher/client/util/BaseHttpAuthClient.java

@@ -12,6 +12,7 @@
 import java.util.Map;
 
 import javax.net.ssl.HttpsURLConnection;
+import javax.net.ssl.SSLSocketFactory;
 
 /**
  * Base class for {@link com.pusher.client.util.HttpChannelAuthorizer} and {@link com.pusher.client.util.HttpUserAuthenticator}
@@ -22,6 +23,7 @@ abstract class BaseHttpAuthClient {
     private final URL endPoint;
     private Map<String, String> mHeaders = new HashMap<>();
     protected ConnectionFactory mConnectionFactory;
+    protected SSLSocketFactory mSslSocketFactory = null;
 
     /**
      * Creates a new auth client.
@@ -61,6 +63,15 @@ public void setHeaders(final Map<String, String> headers) {
         mHeaders = headers;
     }
 
+    /**
+     * Set the SSL socket factory that is used for the connection. This allows to
+     * configure custom certificate handling (self-signed certificates, mutual TLS, ...)
+     * @param sslSocketFactory The SSL socket factory to use
+     */
+    public void setSslSocketFactory(final SSLSocketFactory sslSocketFactory) {
+        mSslSocketFactory = sslSocketFactory;
+    }
+
     /**
      * Identifies if the HTTP request will be sent over HTTPS.
      *
@@ -92,6 +103,11 @@ protected String performAuthRequest() {
             HttpURLConnection connection;
             if (isSSL()) {
                 connection = (HttpsURLConnection) endPoint.openConnection();
+
+                if(mSslSocketFactory != null) {
+                    ((HttpsURLConnection) connection)
+                            .setSSLSocketFactory(mSslSocketFactory);
+                }
             } else {
                 connection = (HttpURLConnection) endPoint.openConnection();
             }