CODEWITHSUNDEEP
android
Todor Grudev
Todor Grudev

Reputation: 1513

Ensure whether request is made by Android Application?

I have RESTful http api that my android application communicates with. Is there any way to ensure whether the request are made only from my application?

Upvotes: 0

Views: 96

Answers (3)

subodh
subodh

Reputation: 6158

You can do it with IP configuration, make a check with your IP. You can configure IP using your application server's configuration file or do it with pro-grammatically in your rest WS.

Upvotes: 0

kgiannakakis
kgiannakakis

Reputation: 104196

There isn't a 100% proof way to do what you want. You can monitor the user agent header, which will have specific values for Android devices. However, you could still see some Android devices not using an appropriate header. Also, no one stops a PC client from sending an Android-like user agent header.

Upvotes: 0

spacediver
spacediver

Reputation: 1493

You could add custom http header at your applicaiton, and check it at the server. Though, this header might be sniffed and forged by malicious user. Then you could go further and do some public key authentication.

Upvotes: 1

Related Questions