[AppCheckCore] Skip local cache when making network requests (#78)

google · Oct 17, 2024 · 4b265b9 · 4b265b9
1 parent 87dd288
commit 4b265b9
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/AppCheckCore/Sources/Core/APIService/GACAppCheckAPIService.m b/AppCheckCore/Sources/Core/APIService/GACAppCheckAPIService.m
@@ -91,6 +91,9 @@ - (instancetype)initWithURLSession:(NSURLSession *)session
              __block NSMutableURLRequest *request = [NSMutableURLRequest requestWithURL:requestURL];
              request.HTTPMethod = HTTPMethod;
              request.HTTPBody = body;
+             // App Check should ignore cached data to prevent reusing
+             // previously received artifacts (e.g. App Attest challenge).
+             request.cachePolicy = NSURLRequestReloadIgnoringLocalCacheData;
 
              if (self.APIKey) {
                [request setValue:self.APIKey forHTTPHeaderField:kAPIKeyHeaderKey];

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,7 @@
+# 11.2.0
+- [changed] To prevent reusing expired artifacts, skip local cache when making
+  network requests.
+
 # 11.1.0
 - [changed] Fall back to App Attest attestation phase if assertion phase fails
   with DeviceCheck error.