Geek Answers Handbook

Make sure the http (s) request comes from my iOS app

I am developing an iOS application where users display content related to their environment. I have username and password authentication. Thus, the user sends his gps data along with his registration information to my PHP / MySQL backend, which then returns the data.

However, I am afraid that someone might decompile my application, register and then “scan” my entire database by simply sending requests with different gps data that are not actually coming from the iOS device. Is there any way to prevent this? I already searched googled and found this threat:

How to make sure that API requests come from our mobile application (ios / android)?

But I think the problem there is a little different and does not solve my problem.

I looked at the API keys, but did not find a way to stop a malicious user from accessing the API through registration / decompilation, and then use my login information along with the key from the code.

Any help is appreciated. Yang

+4
source share
3 answers

I had the same problem with such an application before. After all, you cannot rely on a verifiable connection rule and device access.

The first thing to consider is some form of authentication. But, assuming that you already believed that this might not apply to your application.

, , . , , 10% , , , .

, , , , .

0

, , , ( ), API ?

+2

, GPS . , , , , 500 / 10 000 . , , ; , , , , .

+2

More articles:


All Articles