Verify calls to backend from iOS app

Question

Created Aug ’15

Replies 1

Boosts 0

Views 1.2k

Participants 2

Hi,

Is there something which will let me verify that calls to my backend server are coming from iOS app and not from elsewhere on the web.

Is there something analogous to this:

http://android-developers.blogspot.com.au/2013/01/verifying-back-end-calls-from-android.html

https://developers.google.com/identity/protocols/CrossClientAuth#androidIdTokens

Not interested in any user data, just want to be sure that the calls to the backend are being made from the iOS app and be protected from replay attacks.

Thanks in advance.

Boost

Answer 1

TommieC OP

Aug ’15

You could roll your own using NSURLComponents to analyze the query string being sent. You can use a webservice that requires a token. You could let CloudKit do the heavy lifting (handling authentication, et al.) and if you need the data in a different webservice you might even link to CloudKit with the new server side code tools.

0