What does iOS do wrt Shared Web Credentials when it makes a call to a server to perform a message filter request

Question

Piepants OP

Created 5d

Replies 1

Boosts 0

Participants 1

In order to create a Message Filter Extension it is necessary to set up Shared Web Credentials.

I'd like to form an understanding of what role SWC plays when the OS is making request to the associated network service (when the extension has called deferQueryRequestToNetwork()) and how this differs from when an app directly uses Shared Web Credentials itself.

When an app is making direct use of SWC, it makes a request to obtain the user's credentials from the web site. However in the case of a Message Filter Extension, there aren't any individual user credentials, so what is happening behind the scenes when the OS makes a server request on behalf of a Message Filtering Extension?

A more general question - the documentation for Shared Web Credentials says "Associated domains establish a secure association between domains and your app.".

Thank you

Boost

Answer 1

Piepants OP

5d

The last part of the post got chopped off, I was quoting from the documentation

"Associated domains establish a secure association between domains and your app.".

How is that security established? If more than one app can contain the same domain within its entitlement (from what I have read it is possible for different apps, even from different developers, to contain the same domain) then how does the server know if a request came from an app listed in its app association file versus a request that came from an app which isn't in its app association file?

0