I am creating an Android application to provide website functionality on Android phones.
People need to be logged in and they remain logged in with cookies, which allows them to do something under their account. All login / authentication code has been done for the website, and now I am writing an Android application to do the same.
My question is: if the Android application sends an HTTP request to the PHP server and the server sets some cookies in return (to indicate that the user is logged in), will these cookies store all future HTTP requests to the server in the Android application?
Or do I need to develop a new authentication scheme for Android, for example, transfer a special token to the user login application and an application that provides this token during all future requests for user authentication?
source share