CODEWITHSUNDEEP
iphoneandroidauthentication
virsir
virsir

Reputation: 15489

How to design a web api for mobile app usage?

We are building a mobile app, specifically an android app, and it needs to connect to the server to get data. It is not like twitter, we do not need to expose some kind of public apis. We just need to keep it simple and safe because user will exchange some private data with the server.

My questions is mainly on authentication. Our server will have a user database.

  1. How to register and login in my mobile app ? What kind of mechanism should be implemented in the server side and the client side.
  2. How to keep the session after login?
  3. If I need to let user could login without input his username/password next time when he open the app, What should I do? I just think to store his password in the mobile client is not a good idea.

Upvotes: 7

Views: 1045

Answers (2)

Nobwyn
Nobwyn

Reputation: 8685

  1. As suggested by Nate will do it.

  2. and 3. After successful login your API could return unique session ID (as many webapps does) which you can store in your application and submit to your API with every further request. This way as long as client keeps the session ID stored and on server side its not deleted -user doesn't need to login again.

Upvotes: 1

Nate
Nate

Reputation: 30636

Quick brain dump:

  1. Generate yourself a quick API Key (like a GUID) and communciate with your service via HTTPS.
  2. Huh? How is this different than #3?
  3. Use a simple obfuscation method to store them to local storage for your android app.

If you like, store the username and load it across application sessions and prompt for a password every "session" of your app.

Upvotes: 1

Related Questions