ios - Is it necessary to develop an iPhone Native App with session token controlling at server-side? -


hello, everybody.

i developing iphone native app(including webview in it) communicate server-side webservice.
system has user management module user login/out, chanage theirs own information.

come usual cases such web site, there must token or else security consideration.
iphone native app? because webservice access app think secure enough, necessary implement @ session token way?

thanks, best regards.

how going identification/authentication without token?

i believe when enter user/password authentication pair + device_id sent (using ssl) server, in case of successful authentication server returns session token (session unlimited time, you) device_id. login , token saved somewhere in program (e.g. in defaults key/value storage). password should never saved anywhere in program.

when user launches app, app sends login, token , device_id server, server checks , ok+session_key or nok. in case of nok delete login , token app's storage , display login form again. if response ok - send http requests + session key , server replies you. that...

ps: believe should that, don't have experience in web.


Comments

Popular posts from this blog

jasper reports - Fixed header in Excel using JasperReports -

media player - Android: mediaplayer went away with unhandled events -

python - ('The SQL contains 0 parameter markers, but 50 parameters were supplied', 'HY000') or TypeError: 'tuple' object is not callable -