I want to allow a server to communicate only from the app I created.
Currently, it maintains a fixed string in the source in the app.
The string of the result of the calculation in the application is
When communicating with the server, I gave it to the server and verified it on the server side, but
It was pointed out that the app can be easily decoded, and that fixed strings and calculation methods can be easily discovered by users
In this case, how can I hide a fixed key in the app?
android
Regarding the old post, similar questions were previously asked below.
https://stackoverflow.com/questions/21465559/restrict-api-requests-to-only-my-own-mobile-app
Basically, if it is a public API, I think it will be difficult to accept requests only from specific apps.
I think it's the limit to apply some restrictions such as authentication functions and IP restrictions.
I thought it would be better to share just the link, so I replied.
© 2024 OneMinuteCode. All rights reserved.