Applications can access the network using the normal APIs available to them. Any application packaged as a flatpak needs to request permission to access the network, and this is done in its manifest.
Permission to access the network is done by adding
--socket=wayland to the
"finish-args": [ "--socket=wayland", "--share=network" ],
The application can then request resources in the usual way without being concerned about how the network is configured.