Our authorization plugin implements a custom window using SFAuthorizationPluginView and needs to make web connections to do validations. We have not been able to get it to work using the native MacOS system APIs, such as NSURLSession or NSURLConnection when loaded from the lock screen.
The same connection code works both in an independent executable, in a login plugin, and in the authentication plugin itself when it loads us from the elevate system privileges window.
If we use libcurl it works correctly in all points, but we need to use the system APIs because we use third-party components that use them.
The error it provides is "NSURLErrorDomain Code=-1202"
Analyzing the traces of the process that is responsible for loading our "SecurityAgentHelper" plugin, we have seen that the handshake of the certificates is not completed (logs attached).
We have verified that the problem extends from Catalina to Monterey.
How can we solve the problem? Is it necessary to do something special?