fix: resolve redirects in JS for client-certificate requests and pass blob deadlines to the native path (#627)

2026-11-02 08:07:11 +00:00 · 2026-08-29 18:03:24 +02:00
parent 69bedf0b26
commit 6f747db858
3 changed files with 74 additions and 16 deletions
@@ -141,7 +141,9 @@ class BulwarkClientCertModule(reactContext: ReactApplicationContext)
                    connectTimeout = timeoutMs
                    readTimeout = timeoutMs
                    requestMethod = method
-                    instanceFollowRedirects = true
+                    // Redirects are resolved in JS (lib/client-cert.ts) so a POST
+                    // stays a POST and credentials never follow a cross-host hop.
+                    instanceFollowRedirects = false
                    if (bodyBytes != null) {
                        doOutput = true
                        setFixedLengthStreamingMode(bodyBytes.size)