How do apps validate login on a remote server?

Asked

Viewed 58 times

-1

Let’s assume that I have a website with a Mysql database with log-in logs, so a desktop or mobile app would need information like host, root and password to remotely validate a form, but that wouldn’t be dangerous for every copy of the app to have that information, if someone breaks down the app and sees the connection data, or there is another safer way?

2 answers

1


Check out this series of articles from this link: http://www.androidhive.info/2014/01/how-to-create-rest-api-for-android-app-using-php-slim-and-mysql-day-23/

It is in English, but it is well explained how the authentication process works. By default, each client must have an access token and you will access a link from your database to do these logins on the server. Then the login is done in php inside the site ftp while your app only does access a link and send data via this link with a validation token. Give a check there that’s pretty cool.

0

Communication is usually via webservice (API). Database access data, Mysql for example, is on the server and not on the client.

Do not confuse a system user’s authentication data with the server’s private authentication data. Your question question seems to mix both.

Browser other questions tagged

You are not signed in. Login or sign up in order to post.