SSL, TLS, Security

[alexiokay]

Hey, I’m struggling to set up SSL for my Tauri app.

I tried using a self-signed certificate for my WebSocket server, but it required system trust and admin rights, making it hard to manage across OSes.

My app needs to securely send access/refresh tokens to my HTTPS backend using reqwest. I also want to use TLS for WebSockets, but setting up certificates is a pain.

How can I do this easily?

Also, in production, does Tauri send requests from http://localhost? I want to allow only trusted sources but can’t just whitelist localhost. What’s the best way to handle this?

[FabianLars]

Also, in production, does Tauri send requests from http://localhost/?

http://tauri.localhost and tauri://localhost/ for requests sent using the native browser fetch (and by default our http plugin). If you use reqwest for your own requests then by default it has no origin set iirc.