Hot answers tagged

29 votes
Accepted

Rest APIs - mobile specific challenges

The API being designed follows the Rest style of resources-centric URI and CRUD operations mapped to HTTP verbs. This is your problem right here. You have limited your resources to (I'm assuming) ...
user avatar
20 votes

How to safeguard a REST API for only trusted mobile applications

To anyone interested, on Android you CAN verify that the request you have gotten was sent from your app. In short, when you upload your app to google you sign it, with a unique key that known only to ...
user avatar
  • 317
11 votes
Accepted

Responding to app feature requests I'm not going to implement

Put together a stock "thank you for your interest" letter that covers the possibilities of a) features you will NEVER implement even if I show up on your doorstep with a bag of gold, b) features you ...
user avatar
  • 2,074
9 votes

Why are there no cross-platform mobile applications?

As the co-founder of Codename One which does pretty much that I can answer that pretty easily. You can cross compile (which is what we do) but you can't have a single binary that will work everywhere ...
user avatar
9 votes
Accepted

Data from devices with unreliable clocks

There's actually quite a bit you can do to recover something close to the actual time of most of your events. Android gives you a few useful tools to work with, notably broadcast intents sent when ...
user avatar
  • 19.9k
8 votes

Responding to app feature requests I'm not going to implement

Ideally, you should use such requests as an opportunity to help you and users better understand the application. If you think of it, the very reasons why you prefer to ignore these requests are quite ...
user avatar
  • 21.8k
8 votes

How can a website get the phone number of the device used to call it?

Basically your mobile phone company is adding your phone number to HTTP headers when you visit certain sites. So when you visit www.advertiser.com your request goes to your mobile phone operator, via ...
user avatar
  • 64.6k
7 votes
Accepted

REST API Authentication: Cookie vs Web Storage

Use both. In your mobile app, you have better control over the code that runs and can avoid XSS vulnerabilities. So storing the token is not so problematic and you can have your code pass it to the ...
user avatar
  • 64.6k
6 votes
Accepted

Architecture for an event admission ticket scanner for events with multiple entries

The ideal situation is to have a reliable connection to a single server so you can verify in real time that the presented ticket has not already been admitted to the event. As you pointed out, this ...
user avatar
6 votes
Accepted

Architecture for web and mobile clients

The main problem that I see is that with the top approach, your website needs to be able to accept requests from mobile, as opposed to the services. That seems like something the website should not ...
user avatar
  • 27.2k
6 votes
Accepted

Rest API calls with side effects on other resources

Problem A) Yes, that's fine. RESTful POSTs are permitted to generate side effects on other resources. I'd suggest breaking out messages from conversations in your URI hierarchy in this case, or ...
user avatar
  • 3,342
6 votes
Accepted

Two apps vs one app

Since there are no common features i suggest creating separate applications. That lets you update either app without confusing your users (e.g. updating an app without changing anything for the ...
user avatar
  • 4,333
5 votes

How to safeguard a REST API for only trusted mobile applications

As @Morons mentioned in his answer, it is very difficult to verify the entity at the other end of the connection. The simplest way to provide some level of authenticity is to have the server check ...
user avatar
5 votes

REST vs RPC for mobile development

You might want to have a look at this article by Netflix about their API redesign: http://techblog.netflix.com/2012/07/embracing-differences-inside-netflix.html TL;DR: REST in general causes chatty ...
user avatar
5 votes

Can I use GitHub as my mobile app's data store?

I'm reading the Term of Service of the site and i think that you can use GitHub to host your JSON file. But pay attention to this point: If your bandwidth usage significantly exceeds the average ...
user avatar
  • 421
5 votes

Implementing a method that never returns the same data twice

Why not consider 3. Send a userID and let the server figure out what to send. This will optimize network traffic in a big way - you're always sending the server a single piece of information of ...
user avatar
5 votes

If I develop a media player for mobile or desktop do I have to pay for a license if my player is able to read MP3 files?

I read quite a few forum topics and mailing list (link), the general answer was that if you are using the Android SDK, and you do not have an MP3 encoder/decoder in your application, then you don't ...
user avatar
5 votes

Proposed Method to Restrict API Access to Mobile App Only

Some comments Your mechanism relies upon the secrecy of an algorithm, a technique known as security through obscurity, which is almost universally deemed a bad idea. It is not likely you will be able ...
user avatar
  • 24.7k
5 votes
Accepted

Can you modify the front-end source code of a mobile app?

Yes of course. People like to think that because a lay person can't read the source code for compiled or even "transpiled" applications in the same way you can with javascript on a website that it's ...
user avatar
  • 64.6k
5 votes

Can you modify the front-end source code of a mobile app?

It's not just that people might be able to hack into your front-end app. They might be connecting directly to your server with an app that they wrote themselves. I can get around whatever security ...
user avatar
5 votes

Vector graphics are smaller in file size and more scalable than raster, why vector graphics are not used more often in web and mobile app development?

Cameras don't draw. That is the by and large of it. Photo's are not drawn, and anything compositing a photo into it still has that not a drawing issue. Processing and Bandwidth aren't free A drawn ...
user avatar
  • 15.4k
4 votes

How do I access databases from a mobile device securely?

It's best to not think of making your application "access a database" - your client application logic should be separated from the specifics of the database implementation. The client simply needs to ...
user avatar
4 votes

Private apps for iOS and Android

You can develop and distribute private apps among selected clients. In iOS, ad-hoc distribution is there, but you'll need to hook up your mobile device to a Mac OSX. Ad-hoc distribution is possible ...
user avatar
  • 41
4 votes
Accepted

Mobile app for a website vs browser view

I gonna go through your question paragraph by paragraph: For developers, What is the benefit of creating mobile app for a website? In which cases it is better than viewing it using browser? If ...
user avatar
  • 614
4 votes

Architecture for an event admission ticket scanner for events with multiple entries

As GlenH7 has already stated, given the constraints you have listed in the question your problem is effectively unsolvable. Assuming "it can't be done" is not an acceptable answer we're left with ...
user avatar
  • 11.5k
4 votes
Accepted

Is it correct to implement all the payment flow in the client rather than in the server?

I Haven't used mango pay but usualy these things work in three parts: client redirects user to third party payment app. eg paypal or 3d secure third party tells client payment has been made third ...
user avatar
  • 64.6k
4 votes
Accepted

Implementing a method that never returns the same data twice

If you have full control over the ID generation and the order in which content is presented, then it must be possible to guarantee that if I am looking at the ContentItem with ID 42, then I have ...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible