CODEWITHSUNDEEP
iosauthenticationauthorization
DeyaEldeen
DeyaEldeen

Reputation: 11857

preventing iPhone app users from logging in into multiple devices

I'm creating a book library app, where people buy an account and become able to read all the books...

In the past, we were able to get the UDID of the iOS device and the login only works from this specific UDID.. now apple prevents this, another solutions were there like OPEN-UDID but now doesn't work...

Are there any other means to prevent the user from giving the credentials to another people??

The only solution on top of my head now is this :-

When a user login, a flag on the server becomes true, and when another account try to login using the same credentials, it will show an error message "you are already logged in on another device".. when the original user logs out, the flag becomes false.. this will prevent the account from being used on multiple devices at the same time.. but the drawback is, what if the user unInstalls the app without logging out?

Is there a research on this topic that covers all these scenarios?

Is there a way to use apple keychain or iCloud or any other solution ?

Upvotes: 1

Views: 1082

Answers (1)

Varun Naharia
Varun Naharia

Reputation: 5428

What you can do is on new login invalidate api request(and send them to login screen) of previous login you can use device token with each api to check if you want to send data to device or it's a old login token and needs redirect to login. you have to just store a device token for each account login if it matches then send data else redirect to login

Edit 1:

if you uninstall the app then you have to login again from other device to access the books(data) and in each login you'll replace the old token with new one. Now only device which has this new token can access books. All other device if there are any login left in any device then they will get message from API that token not matched and you have to redirect them to login page again

Upvotes: 3

Related Questions