All geek questions in one place

Secret key for iphone access device

How can I make sure that only my iphone app is allowed to use the app app to send and receive data? I should probably use a secret key, but I don't know how to do this. Can I just use post / get to send my static key over https? Or do I need to use a dynamic secret key algorithm?

Any help would be appreciated! Bjorn

+3
source share
3 answers

Assuming you can keep a secret in your iPhone app from what you need, you need HMAC . For each request you make, pass the request text to a function, such as HMAC-SHA1, with the private key as the key and add the result to the request. When the server receives the request, perform the same operation and verify that the HMACs match.

+2
source

I'm not quite sure what you are trying to accomplish.

But sharing the secrets or API keys inside your iPhone application is usually a bad idea.

AppEngine. ( JSON) - AppEngine, ? , AppEngine iPhone-.

, .

0

SSL- -, , , .

SSL , , , .

, . , - - . , , , .

, wsdl , .

SSL ceritifcate RapidSSL $17 , .

0

Source: https://habr.com/ru/post/1732660/

More articles:


All Articles