phonegap和php之间的身份验证

Question

i need a system of authentication between phonegap and php. I make a request by ajax sending the user and pass. Php make the query mysql with these data if is correct it is return the PHPSESSID and save with javascript in LocalStorage. when this user make actions as comments, upload photos.. check if exist PHPSESSID in LocalStore and check this PHPSESSID in php.

Is correct make this?

Answer 1

It's better if you use RESTful principle which means the server is stateless. Try to dig up on how to make web services using rest. There should be tons of examples where you can try on.

Answer 2

OAuth springs to mind. Store the token in localStorage rather than storing the session ID. That way, you can quickly and easily recall it.

You can also tweak your OAuth provider to auto-refresh tokens that are used, so tokens never really expire.