How do popular apps authenticate user requests from their mobile app to their server?
I imagine they use a “token” based security system, so the password is actually never stored anywhere, just used the first time to authenticate. So the app initially posts the username/password (over ssl) and the server returns a token that the app stores. For subsequent sync attempts the token is sent first, the server checks … Read more