Skip to main content

All Questions

Tagged with
Filter by
Sorted by
Tagged with
2 votes
2 answers
296 views

Understanding passwordless sign up for mobile apps

How does phone number based authentication work, and what are its best practices? I've noticed there are apps with streamlined sign-up/log-in processes where only a phone number is required, simply ...
dev-brent's user avatar
1 vote
1 answer
308 views

Mobile authentication approaches, JWTs and refresh tokens

Context I'm developing togther with my dev team a mobile app in a client-server architecture, since there will be a webclient too, allowing some users (admins) to perform certain operations from the ...
Leonardo Viada's user avatar
6 votes
0 answers
265 views

Is it possible to use a reverse proxy authentication in a native mobile app

We have a few backend services that our frontend SPAs fetch data from. Right now, the SPAs use JS libraries to authenticate with the Auth server (Azure AD) which returns a JWT which is validated by my ...
Sayak Mukhopadhyay's user avatar
1 vote
2 answers
698 views

Recommended strategy for maintaining a session when navigating from app to browser?

We have an SSO application that provides authentication for a native mobile application, as well as for a web application. There are some features that the web application has that the mobile ...
John Leehey's user avatar
0 votes
1 answer
2k views

Best way to store Session token on mobile App

Background Building a mobile App for product X which is currently hosted as a SaaS solution. The product X does not support OAuth currently, implements basic authentication and generates Session token ...
Anurag's user avatar
  • 109
2 votes
0 answers
1k views

Biometric authentication with back-end verification service process

I am working on an application where I will be using Android and iOS biometric authentication. Coding the use of biometrics on the devices, including prompting and determining whether or not the user ...
el n00b's user avatar
  • 121
1 vote
1 answer
5k views

Offline-Login Procedure in PWA

I have kind of a unique usecase: Phones that are used to connect to the app might be shared Connections are very unstable (sometimes no connection for half a day) Data should be accessible through ...
Pascal Zaugg's user avatar
0 votes
1 answer
97 views

Authentication, Sign In mobile

I am new to mobile development. As i understand the best way to authenticate/give authorization to a user is using OAuth2.0 with the social providers as Facebook, Google ect ... When we enter the ...
Kamil's user avatar
  • 103
3 votes
1 answer
2k views

REST API Authentication: Cookie vs Web Storage

Note: This question might sound like a duplicate, but all other similar questions did not take into account (mobile apps, iot's, web, 3rd party usage). Specifically, in dealing with the clients ...
curiousyigit's user avatar
0 votes
2 answers
120 views

Managing sign-on in mobile applications

I'm programming a mobile app which makes use of REST services. Some of the services are for logged users, so I have a login endpoint which lets me enter my credentials and get a JWT token for ...
BackSlash's user avatar
  • 211
2 votes
1 answer
927 views

Web-based vs Native Social Login on Mobile Clients

I've been researching this topic for days, but can't really find any solid reference surrounding this topic.. The idea is providing social login for mobile client apps. That's it. Sharing, accessing ...
Mazyod's user avatar
  • 265
3 votes
0 answers
104 views

How do I authenticate users from facebook/twitter?

I need to build a site for a mobile app that allows users to sign in with facebook/twitter or sign up as a new user (traditional username/password). No matter which method the user chooses, they ...
resting's user avatar
  • 319
17 votes
1 answer
14k views

Authenticate native mobile app using a REST API

I'm starting a new project soon, which is targeting mobile application for all major mobile platforms (iOS, Android, Windows). It will be a client-server architecture. The app is both informational ...
supercell's user avatar
  • 1,527
-2 votes
2 answers
154 views

APIs that deal with logins

I have been asked to make a mobile app for a friends website. The website is a Multi level marketing site that sells products and franchises. A client logs in in to the website and can view his or her ...
Brandon Still's user avatar
4 votes
4 answers
1k views

Is restricting sessions to an absolute IP likely to have a wide impact on mobile networks?

Our website currently restricts a cookie-based session to the IP address that was originally sent the Set-Cookie HTTP header. In the past a user's IP would rarely change, so this didn't present much ...
tjbp's user avatar
  • 141