Android网络请求开发指南：权限配置与最佳实践

1. Android网络请求基础与权限配置在Android开发中网络请求是应用与服务器交互的核心手段。与iOS不同Android平台对网络操作有着独特的权限要求和安全限制。让我们先看看最基本的配置要求每个需要进行网络通信的Android应用必须在AndroidManifest.xml中声明以下两个基础权限uses-permission android:nameandroid.permission.INTERNET / uses-permission android:nameandroid.permission.ACCESS_NETWORK_STATE /这两个权限属于普通权限(normal permission)意味着系统会在安装时自动授予不需要运行时动态申请。但它们的意义重大INTERNET权限允许应用打开网络套接字(socket)这是所有网络通信的基础ACCESS_NETWORK_STATE权限让应用能够检测当前网络连接状态避免在无网络时发起无效请求注意从Android 9API级别28开始默认禁止明文HTTP流量。如果必须使用HTTP非HTTPS需要在AndroidManifest中添加android:usesCleartextTraffictrue但这会降低安全性不推荐生产环境使用。2. 主流HTTP客户端选型与对比Android开发者有多种HTTP客户端可选每种都有其适用场景2.1 原生HttpsURLConnection作为Android SDK内置的HTTP客户端HttpsURLConnection提供基础功能支持TLS/SSL加密流式上传下载可配置超时IPv6支持连接池管理典型使用示例val url URL(https://api.example.com/data) val connection url.openConnection() as HttpsURLConnection try { connection.requestMethod GET connection.connectTimeout 5000 connection.readTimeout 10000 if (connection.responseCode HttpURLConnection.HTTP_OK) { val inputStream connection.inputStream // 处理响应数据 } } finally { connection.disconnect() }优点无需额外依赖适合简单请求 缺点API较为底层需要手动处理线程和解析2.2 Retrofit OkHttp组合Square公司提供的这套组合是目前Android社区最流行的网络方案OkHttp底层HTTP客户端提供连接池、GZIP压缩、响应缓存等优化Retrofit基于OkHttp的类型安全HTTP客户端通过接口声明API典型配置// 构建OkHttpClient val okHttpClient OkHttpClient.Builder() .connectTimeout(15, TimeUnit.SECONDS) .readTimeout(15, TimeUnit.SECONDS) .addInterceptor(HttpLoggingInterceptor().apply { level HttpLoggingInterceptor.Level.BODY }) .build() // 创建Retrofit实例 val retrofit Retrofit.Builder() .baseUrl(https://api.example.com/) .client(okHttpClient) .addConverterFactory(GsonConverterFactory.create()) .build() // 定义API接口 interface UserService { GET(users/{id}) suspend fun getUser(Path(id) id: String): User } // 使用 val userService retrofit.create(UserService::class.java) val user userService.getUser(123)优势声明式API设计自动线程切换支持多种数据格式(JSON/XML等)强大的拦截器机制2.3 Ktor客户端来自JetBrains的Ktor是纯Kotlin实现的HTTP客户端特别适合协程环境val client HttpClient(CIO) { install(JsonFeature) { serializer KotlinxSerializer() } install(Logging) { level LogLevel.HEADERS } defaultRequest { url(https://api.example.com/) } } suspend fun getUser(id: String): User { return client.get(users/$id) }特点完全基于协程设计模块化功能扩展支持多平台(Android/iOS/JVM等)2.4 选型建议方案适用场景学习曲线性能社区支持HttpsURLConnection简单请求、无依赖项目低中等官方支持RetrofitOkHttp常规REST API调用中高非常活跃Ktor纯Kotlin/多平台项目中高高快速增长3. 网络请求架构设计模式良好的架构设计能显著提升网络层的可维护性和可测试性。以下是Android推荐的几种模式3.1 Repository模式Repository作为单一数据源封装所有数据获取逻辑class UserRepository( private val userService: UserService, private val userDao: UserDao ) { suspend fun getUser(id: String): User { // 先检查本地缓存 val cachedUser userDao.getUserById(id) if (cachedUser ! null) { return cachedUser } // 网络请求 val networkUser userService.getUser(id) // 保存到本地 userDao.insertUser(networkUser) return networkUser } }优势统一数据访问入口轻松切换数据源便于添加缓存策略3.2 ViewModel LiveData组合在UI层使用ViewModel管理网络请求class UserViewModel( private val userRepository: UserRepository ) : ViewModel() { private val _user MutableLiveDataUser() val user: LiveDataUser _user private val _error MutableLiveDataString() val error: LiveDataString _error fun loadUser(id: String) { viewModelScope.launch { try { val user userRepository.getUser(id) _user.value user } catch (e: Exception) { _error.value 加载用户失败: ${e.message} } } } }3.3 依赖注入实践使用Hilt等DI框架管理网络组件Module InstallIn(SingletonComponent::class) object NetworkModule { Provides Singleton fun provideOkHttpClient(): OkHttpClient { return OkHttpClient.Builder() .addInterceptor(HttpLoggingInterceptor()) .build() } Provides Singleton fun provideRetrofit(okHttpClient: OkHttpClient): Retrofit { return Retrofit.Builder() .client(okHttpClient) .baseUrl(https://api.example.com/) .addConverterFactory(GsonConverterFactory.create()) .build() } Provides fun provideUserService(retrofit: Retrofit): UserService { return retrofit.create(UserService::class.java) } }4. 高级网络功能实现4.1 文件上传下载使用OkHttp实现文件上传val requestBody MultipartBody.Builder() .setType(MultipartBody.FORM) .addFormDataPart( file, file.name, file.asRequestBody(image/*.toMediaType()) ) .build() val request Request.Builder() .url(https://api.example.com/upload) .post(requestBody) .build() okHttpClient.newCall(request).enqueue(object : Callback { override fun onResponse(call: Call, response: Response) { // 处理响应 } override fun onFailure(call: Call, e: IOException) { // 处理错误 } })带进度显示的下载实现val client OkHttpClient.Builder() .addNetworkInterceptor { chain - val originalResponse chain.proceed(chain.request()) originalResponse.newBuilder() .body(originalResponse.body?.let { ProgressResponseBody(it) { bytesRead, contentLength - // 更新进度回调 val progress (bytesRead * 100 / contentLength).toInt() runOnUiThread { progressBar.progress progress } } }) .build() } .build()4.2 网络缓存策略OkHttp内置缓存支持val cacheSize 10 * 1024 * 1024 // 10MB val cache Cache(File(context.cacheDir, http_cache), cacheSize.toLong()) val okHttpClient OkHttpClient.Builder() .cache(cache) .addInterceptor(CacheInterceptor()) .build() class CacheInterceptor : Interceptor { override fun intercept(chain: Interceptor.Chain): Response { val request chain.request() val cacheControl request.header(Cache-Control) ?: max-age60 val response chain.proceed(request) return response.newBuilder() .header(Cache-Control, cacheControl) .build() } }4.3 网络状态监测检测网络连接状态val connectivityManager getSystemService(CONNECTIVITY_SERVICE) as ConnectivityManager fun isNetworkAvailable(): Boolean { val network connectivityManager.activeNetwork ?: return false val capabilities connectivityManager.getNetworkCapabilities(network) ?: return false return capabilities.hasCapability(NET_CAPABILITY_INTERNET) capabilities.hasCapability(NET_CAPABILITY_VALIDATED) } // 监听网络变化 val callback object : ConnectivityManager.NetworkCallback() { override fun onAvailable(network: Network) { // 网络恢复 } override fun onLost(network: Network) { // 网络断开 } } connectivityManager.registerDefaultNetworkCallback(callback)5. 性能优化与调试技巧5.1 连接池优化OkHttp默认维护一个连接池合理配置可提升性能val okHttpClient OkHttpClient.Builder() .connectionPool(ConnectionPool( maxIdleConnections 5, // 最大空闲连接数 keepAliveDuration 5, // 保持活动时间(分钟) timeUnit TimeUnit.MINUTES )) .build()5.2 请求合并与批处理对于高频小请求可考虑合并interface BatchService { POST(batch) suspend fun executeBatch(Body requests: ListBatchRequest): ListBatchResponse } data class BatchRequest( val method: String, val url: String, val body: Any? )5.3 使用Stetho调试网络Facebook的Stetho工具可方便调试网络请求val okHttpClient OkHttpClient.Builder() .addNetworkInterceptor(StethoInterceptor()) .build() // 在Application中初始化 class MyApp : Application() { override fun onCreate() { super.onCreate() Stetho.initializeWithDefaults(this) } }连接设备后在Chrome地址栏输入chrome://inspect5.4 DNS优化Android 10支持自定义DNS解析val okHttpClient OkHttpClient.Builder() .dns(Dns.SYSTEM) // 使用系统DNS // 或自定义DNS .dns { hostname - if (hostname api.example.com) { listOf(InetAddress.getByName(1.2.3.4)) } else { Dns.SYSTEM.lookup(hostname) } } .build()6. 安全最佳实践6.1 证书锁定(Certificate Pinning)防止中间人攻击val certificatePinner CertificatePinner.Builder() .add(api.example.com, sha256/AAAAAAAAAAAAAAAAAAAAAAAA) .build() val okHttpClient OkHttpClient.Builder() .certificatePinner(certificatePinner) .build()6.2 网络安全配置在res/xml/network_security_config.xml中定义network-security-config domain-config domain includeSubdomainstrueexample.com/domain trust-anchors certificates srcraw/my_ca/ /trust-anchors /domain-config /network-security-config然后在AndroidManifest中引用application android:networkSecurityConfigxml/network_security_config ... 6.3 敏感数据保护使用HTTPS而非HTTP不要在URL中传递敏感参数使用Android Keystore存储密钥对敏感请求添加时间戳和签名7. 常见问题排查7.1 NetworkOnMainThreadException错误原因在主线程执行了同步网络请求解决方案使用Retrofit的suspend函数在协程或子线程中执行请求使用enqueue()进行异步调用7.2 SSLHandshakeException错误原因SSL证书验证失败解决方案检查服务器证书是否有效如需调试可临时添加信任所有证书的拦截器仅限开发环境正确配置网络安全配置7.3 连接超时排查步骤检查网络是否正常增加超时时间检查服务器是否可达检查代理设置使用ping/telnet测试基础连接7.4 响应解析失败常见原因数据格式与定义不符字段类型不匹配使用了错误的解析器调试方法先打印原始响应字符串检查JSON/XML格式是否正确验证数据模型类定义8. 测试策略8.1 单元测试使用MockWebServer测试网络层val mockWebServer MockWebServer() Before fun setup() { mockWebServer.start() mockWebServer.enqueue(MockResponse().setBody({id:123,name:Test})) } Test fun testUserRequest() { val userService createTestUserService(mockWebServer.url(/)) val user userService.getUser(123) assertEquals(Test, user.name) } After fun tearDown() { mockWebServer.shutdown() }8.2 UI测试使用IdlingResource同步网络请求RunWith(AndroidJUnit4::class) class UserActivityTest { get:Rule val activityRule ActivityScenarioRule(UserActivity::class.java) private val idlingResource SimpleIdlingResource() Before fun registerIdlingResource() { IdlingRegistry.getInstance().register(idlingResource) } Test fun displayUserName() { onView(withId(R.id.username)).check(matches(withText(Test))) } After fun unregisterIdlingResource() { IdlingRegistry.getInstance().unregister(idlingResource) } }8.3 性能测试使用Android Profiler监控网络性能检查请求耗时分析流量使用识别重复请求优化图片等大资源加载9. 最新技术趋势9.1 gRPC支持使用gRPC实现高效通信val channel ManagedChannelBuilder .forAddress(api.example.com, 443) .useTransportSecurity() .build() val stub UserServiceGrpc.newBlockingStub(channel) val request UserRequest.newBuilder().setId(123).build() val response stub.getUser(request)9.2 WebSocket长连接实现实时通信val request Request.Builder() .url(wss://api.example.com/ws) .build() val listener object : WebSocketListener() { override fun onMessage(webSocket: WebSocket, text: String) { // 处理消息 } override fun onFailure(webSocket: WebSocket, t: Throwable, response: Response?) { // 处理错误 } } val webSocket okHttpClient.newWebSocket(request, listener)9.3 GraphQL集成使用Apollo Android客户端val apolloClient ApolloClient.Builder() .serverUrl(https://api.example.com/graphql) .okHttpClient(okHttpClient) .build() val query GetUserQuery(123) apolloClient.query(query).enqueue(object : ApolloCall.CallbackGetUserQuery.Data() { override fun onResponse(response: ResponseGetUserQuery.Data) { val user response.data?.user } })10. 实战经验分享在实际项目中有几个关键点值得特别注意重试策略对于重要但不紧急的请求实现指数退避重试机制suspend fun T retryWithBackoff( times: Int 3, initialDelay: Long 1000, maxDelay: Long 10000, factor: Double 2.0, block: suspend () - T ): T { var currentDelay initialDelay repeat(times - 1) { attempt - try { return block() } catch (e: Exception) { if (attempt times - 1) throw e delay(currentDelay) currentDelay (currentDelay * factor).toLong().coerceAtMost(maxDelay) } } return block() // 最后一次尝试 }请求去重对于相同的请求避免重复发送class RequestDeduplicator { private val inFlightRequests mutableMapOfString, Deferred*() suspend fun T deduplicate( key: String, block: suspend () - T ): T { val existing inFlightRequests[key] if (existing ! null) { Suppress(UNCHECKED_CAST) return existing.await() as T } return coroutineScope { val deferred async(start CoroutineStart.LAZY) { try { block() } finally { inFlightRequests.remove(key) } } inFlightRequests[key] deferred deferred.await() } } }离线优先在网络不稳定地区优先显示缓存内容fun loadData() { viewModelScope.launch { _data.value repository.getCachedData() // 立即显示缓存 try { val freshData repository.fetchFreshData() _data.value freshData } catch (e: IOException) { // 网络错误继续使用缓存 } } }请求优先级对关键请求设置更高优先级val request Request.Builder() .url(url) .priority(Priority.HIGH) .build()大文件下载实现断点续传val downloadFile File(downloadDir, fileName) val downloadedBytes downloadFile.length() val request Request.Builder() .url(url) .header(Range, bytes$downloadedBytes-) .build() val response okHttpClient.newCall(request).execute() if (response.code HttpURLConnection.HTTP_PARTIAL) { val inputStream response.body?.byteStream() val outputStream FileOutputStream(downloadFile, true) inputStream?.copyTo(outputStream) }