Reputation: 1958
I am developing a number of pet projects with PhoneGap and I was interested as to if anyone could recommend the best way to securely send data from the app to a server, and vice versa.
I'm logging the user in with Facebook, with their access_token in localStorage so it will persist, but I'm going to need to hit the server to create a profile, collect data to display in-app, etc..
I have considered a JSON service that auth's against an encrypted Facebook UID, or a digest auth based REST service. Any ideas on what the "proper" way to do this would be?
Upvotes: 1
Views: 595
Reputation: 5706
Have you considered using SSL, I find its way less hassle that trying to hash something yourself. If you are not using SSL you can't prevent a man in the middle attack...maybe im wrong here, or lazy, probably both...
Upvotes: 1