Different methods for checking anonymous mobile client using Node REST API

I am studying and I want to learn something.

I have the following:

Client (iOS / Swift):

  • No registration required (no email address / username / password / phone number).
  • Connection to server is secure (SSL)
  • I want users to remain anonymous and register them without entering them into a username and password combination. The way I do this is to currently create a combination of UUID and password on the device, save it in a keychain and upload it to the server (password hashing first). Not sure where to go next .

Server API (Node / Express):

  • Unprotected endpoints (anyone with a URL can call them)

What I want to do:

  • , iOS, , (api/v1/articles)

  • , "" (:/{article_id}/favorite)

, , ( ) JWT (-jwt), API- API, API, , UUID, PassportJS, , OAuth/2 .....

+4

All Articles