本地移动应用程序身份验证方法的最佳方法

Question

I'm pretty confused on what authentication method to use for my android/ios app.

I'm trying to create login for user and maintain session on the app. If token based authentication is used for session, then it should have expiry time.

Shall I go ahead with ApiAuth token based authentication or Json Web Token authentication for my native apps. Please help me to choose.

Answer 1

From my experience, we have a substantially complex Rails API which is consumed by both iOS and Android client apps. We use JWT for authentication and it's working pretty well. There is a jwt ruby gem as well. It's easy to have expiry time using JWT. This is also one of the most popular choices of it's kind, so I think you can definitely give this a shot.