All Questions
Tagged with mobile authentication
15 questions
2
votes
2
answers
296
views
Understanding passwordless sign up for mobile apps
How does phone number based authentication work, and what are its best practices?
I've noticed there are apps with streamlined sign-up/log-in processes where only a phone number is required, simply ...
1
vote
1
answer
308
views
Mobile authentication approaches, JWTs and refresh tokens
Context
I'm developing togther with my dev team a mobile app in a client-server architecture, since there will be a webclient too, allowing some users (admins) to perform certain operations from the ...
6
votes
0
answers
265
views
Is it possible to use a reverse proxy authentication in a native mobile app
We have a few backend services that our frontend SPAs fetch data from. Right now, the SPAs use JS libraries to authenticate with the Auth server (Azure AD) which returns a JWT which is validated by my ...
1
vote
2
answers
698
views
Recommended strategy for maintaining a session when navigating from app to browser?
We have an SSO application that provides authentication for a native mobile application, as well as for a web application. There are some features that the web application has that the mobile ...
0
votes
1
answer
2k
views
Best way to store Session token on mobile App
Background
Building a mobile App for product X which is currently hosted as a SaaS solution. The product X does not support OAuth currently, implements basic authentication and generates Session token ...
2
votes
0
answers
1k
views
Biometric authentication with back-end verification service process
I am working on an application where I will be using Android and iOS biometric authentication.
Coding the use of biometrics on the devices, including prompting and determining whether or not the user ...
1
vote
1
answer
5k
views
Offline-Login Procedure in PWA
I have kind of a unique usecase:
Phones that are used to connect to the app might be shared
Connections are very unstable (sometimes no connection for half a day)
Data should be accessible through ...
0
votes
1
answer
97
views
Authentication, Sign In mobile
I am new to mobile development.
As i understand the best way to authenticate/give authorization to a user is using OAuth2.0 with the social providers as Facebook, Google ect ... When we enter the ...
3
votes
1
answer
2k
views
REST API Authentication: Cookie vs Web Storage
Note: This question might sound like a duplicate, but all other similar questions did not take into account (mobile apps, iot's, web, 3rd party usage). Specifically, in dealing with the clients ...
0
votes
2
answers
120
views
Managing sign-on in mobile applications
I'm programming a mobile app which makes use of REST services.
Some of the services are for logged users, so I have a login endpoint which lets me enter my credentials and get a JWT token for ...
2
votes
1
answer
927
views
Web-based vs Native Social Login on Mobile Clients
I've been researching this topic for days, but can't really find any solid reference surrounding this topic..
The idea is providing social login for mobile client apps. That's it. Sharing, accessing ...
3
votes
0
answers
104
views
How do I authenticate users from facebook/twitter?
I need to build a site for a mobile app that allows users to sign in with facebook/twitter or sign up as a new user (traditional username/password).
No matter which method the user chooses, they ...
17
votes
1
answer
14k
views
Authenticate native mobile app using a REST API
I'm starting a new project soon, which is targeting mobile application for all major mobile platforms (iOS, Android, Windows). It will be a client-server architecture.
The app is both informational ...
-2
votes
2
answers
154
views
APIs that deal with logins
I have been asked to make a mobile app for a friends website. The website is a Multi level marketing site that sells products and franchises. A client logs in in to the website and can view his or her ...
4
votes
4
answers
1k
views
Is restricting sessions to an absolute IP likely to have a wide impact on mobile networks?
Our website currently restricts a cookie-based session to the IP address that was originally sent the Set-Cookie HTTP header. In the past a user's IP would rarely change, so this didn't present much ...