Handle local network permission - Android 17

[ganfra]

Content

Android 17 introduces a new runtime permission for reaching local-network addresses. Without it, TCP connections to local IPs silently time out.

How it works

• New LocalNetworkAddressClassifier classifies a URL as LocalIp / PublicIp / Unresolvable via InetAddress + .local mDNS heuristics.
• LocalNetworkPermissionAdvisor combines the classifier + SDK version + current permission state into a single "should we prompt?" decision.
• LocalNetworkPermissionGate is a shared Composable state machine that renders a rationale dialog (or "Open settings" variant for permanently-denied cases) before the OS prompt.
• Consumed at three call sites:
  • LoggedInPresenter : existing sessions upgraded to Android 17.
  • New LoginModePresenter (extracted from the deleted LoginHelper) sign-in flow, shared by the four account-provider screens (onboarding, confirm, choose, classic).
  • ChangeServerPresenter when switching homeserver from settings.

Also

• New PermissionsEvent.ForceRequestPermissions bypasses the existing soft-denial intercept in DefaultPermissionsPresenter, needed because we render our own rationale/settings
  variants instead of the built-in PermissionsView.
• MatrixClient.homeserverUrl exposed so consumers can consult the advisor.

Motivation and context

Closes #7073

Screenshots / GIFs

Tests

• Sign in from Onboarding / Confirm / Choose / Classic screens with a local homeserver → rationale dialog appears before OS prompt.
• Existing session on Android 17 with a local homeserver → rationale dialog on home screen; dismiss persists per-session.
• Change server to a local URL → same rationale flow.
• Sign in with a public homeserver → no prompt.

Tested devices

• Physical
• Emulator
• OS version(s):

Checklist

• I am aware of the etiquette.
• This PR was made with the help of AI:
  • Yes. In this case, please request a review by Copilot.
  • No.
• Changes have been tested on an Android device or Android emulator with API 24
• UI change has been tested on both light and dark themes
• Accessibility has been taken into account. See https://github.com/element-hq/element-x-android/blob/develop/CONTRIBUTING.md#accessibility
• Pull request is based on the develop branch
• Pull request title will be used in the release note, it clearly defines what will change for the user
• Pull request includes screenshots or videos if containing UI changes
• You've made a self review of your PR

[github-actions]

📱 Scan the QR code below to install the build (arm64 only) for this PR.

If you can't scan the QR code you can install the build via this link: https://i.diawi.com/acFJyb

[bmarty]

The popup show "Settings" instead of "Allow access". Also the "Settings" button can be no-op

[ganfra]

The popup show "Settings" instead of "Allow access". Also the "Settings" button can be no-op

Ok, should be fixed now, but one of the issue doesn't exist on real device, only emulator...

[sonarqubecloud]

Quality Gate passed

Issues
5 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[ElementBot]

• ⚠️ Field requires API level 37 (current min is 33): android.Manifest.permission#ACCESS_LOCAL_NETWORK

[ElementBot]

• ⚠️ Field requires API level 37 (current min is 33): android.Manifest.permission#ACCESS_LOCAL_NETWORK

[codecov]

Codecov Report

❌ Patch coverage is 75.22388% with 83 lines in your changes missing coverage. Please review.
✅ Project coverage is 80.51%. Comparing base (7c3d1e2) to head (f25ca5b).
⚠️ Report is 25 commits behind head on develop.

Files with missing lines	Patch %	Lines
...ement/android/appnav/loggedin/LoggedInPresenter.kt	42.10%	9 Missing and 2 partials ⚠️
...l/localnetwork/LocalNetworkPermissionDialogView.kt	50.00%	8 Missing and 2 partials ⚠️
...id/features/login/impl/login/LoginModePresenter.kt	79.16%	4 Missing and 6 partials ⚠️
...io/element/android/appnav/loggedin/LoggedInView.kt	59.09%	4 Missing and 5 partials ⚠️
...in/impl/localnetwork/LocalNetworkPermissionGate.kt	82.35%	4 Missing and 2 partials ⚠️
...features/login/impl/resolver/HomeserverResolver.kt	20.00%	3 Missing and 1 partial ⚠️
...chooseaccountprovider/ChooseAccountProviderView.kt	55.55%	2 Missing and 2 partials ⚠️
...nfirmaccountprovider/ConfirmAccountProviderView.kt	55.55%	2 Missing and 2 partials ⚠️
...s/login/impl/changeserver/ChangeServerPresenter.kt	62.50%	1 Missing and 2 partials ⚠️
...roid/libraries/androidutils/network/DnsResolver.kt	0.00%	3 Missing ⚠️
... and 12 more

Additional details and impacted files

@@             Coverage Diff             @@
##           develop    #7165      +/-   ##
===========================================
- Coverage    80.53%   80.51%   -0.03%     
===========================================
  Files         2705     2714       +9     
  Lines        78030    78270     +240     
  Branches     10532    10582      +50     
===========================================
+ Hits         62843    63016     +173     
- Misses       11128    11174      +46     
- Partials      4059     4080      +21     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.