From 88d361d00dea308fdfb67aeff14b2153bd00dfd2 Mon Sep 17 00:00:00 2001
From: Eric85710 <ericchen87887@gmail.com>
Date: Sat, 30 May 2026 17:00:19 +0800
Subject: [PATCH] dm-62

---
 .../com/example/login_v3/data/di/NetworkModule.kt   |  7 +++++--
 app/src/main/res/xml/network_security_config.xml    | 13 ++++++++++++-
 2 files changed, 17 insertions(+), 3 deletions(-)

diff --git a/app/src/main/java/com/example/login_v3/data/di/NetworkModule.kt b/app/src/main/java/com/example/login_v3/data/di/NetworkModule.kt
index 11b9a92..c3c11be 100644
--- a/app/src/main/java/com/example/login_v3/data/di/NetworkModule.kt
+++ b/app/src/main/java/com/example/login_v3/data/di/NetworkModule.kt
@@ -36,8 +36,8 @@ object NetworkModule {
     @Singleton
     fun provideRetrofit(moshi: Moshi, okHttpClient: OkHttpClient): Retrofit {
         return Retrofit.Builder()
-            .baseUrl("http://192.168.0.217/")
-            .client(okHttpClient) // 🔥 關鍵：將攔截器綁定到 Retrofit
+            .baseUrl("https://192.168.0.217/")
+            .client(okHttpClient)   // 關鍵：將攔截器綁定到 Retrofit
             .addConverterFactory(MoshiConverterFactory.create(moshi))
             .build()
     }
@@ -48,6 +48,9 @@ object NetworkModule {
         return OkHttpClient.Builder()
             .connectTimeout(15, TimeUnit.SECONDS)
             .readTimeout(15, TimeUnit.SECONDS)
+            // 🟢 修正 2：如果使用 IP 且噴出 Hostname 錯誤才需要加這段。
+            // 如果後端憑證的 SAN/CN 已經有包含 192.168.0.217，這行可以刪除。
+            .hostnameVerifier { hostname, _ -> hostname == "192.168.0.217" }
             .addInterceptor { chain ->
                 // 1. 動態獲取「目前選中帳號」的 Token
                 // 使用 first() 確保只取目前最新的那一個值
diff --git a/app/src/main/res/xml/network_security_config.xml b/app/src/main/res/xml/network_security_config.xml
index a8f01d8..ad77b6c 100644
--- a/app/src/main/res/xml/network_security_config.xml
+++ b/app/src/main/res/xml/network_security_config.xml
@@ -1,6 +1,17 @@
 <?xml version="1.0" encoding="utf-8"?>
 <network-security-config>
-    <domain-config cleartextTrafficPermitted="true">
+    <domain-config cleartextTrafficPermitted="false">
         <domain includeSubdomains="true">192.168.0.217</domain>
+
+        <trust-anchors>
+            <certificates src="system" />
+            <certificates src="@raw/root" />
+        </trust-anchors>
     </domain-config>
+
+    <base-config cleartextTrafficPermitted="false">
+        <trust-anchors>
+            <certificates src="system" />
+        </trust-anchors>
+    </base-config>
 </network-security-config>
\ No newline at end of file