tags:

views:

81

answers:

1
+1  Q: 

How to implement login functionality in an Android app safely?

Firstly, no OAuth or other things supported in the server-side, just a normal username-password database querying.

I want to implement an android client for the web site. My questions are:

  1. How to login safely? with HTTPS?
  2. How to store user login information safely in the phone to make user login without any input in the next time.
  3. If user do some actions after login, how to id himself? how to keep the session? By copy and resend some cookies like "jsessionid" ?
A: 

Hey i am also looking to implement the same functionality..do u have any success ??

 2010-08-27 22:04:37
not yet, still waiting for answers.
virsir  2010-09-03 03:11:15

related questions

How would you implement a secure static login credentials system in Java?
Blocking https url's in a embedded gecko browser
Restrict Apache to only allow access using SSL for some directories
How to put up an off-the-shelf https to http gateway?
Rails SSL Requirement plugin -- shouldn't it check to see if you're in production mode before redirecting to https?
What's the best way to learn server RESTful code?
Force HTTPS. How is it possible?
How can I get LWP to validate SSL server certificates?
What must I do to make content such as images served over HTTPS be cached client-side?
What does a PHP developer need to know about https / secure socket layer connections?
What's a clean/simple way to ensure the security of a page?
Making sure a web page is not cached, across all browsers.
Best way in asp.net to force https for an entire site?
Any way to handle Put and Delete verbs in ASP.Net MVC?
Response.Redirect with POST instead of Get?
How to get the correct Content-Length for a POST request.
IIS7: HTTP->HTTPS Cleanly
[ASP.NET ERROR] The request was aborted: Could not create SSL/TLS secure channel.
Testing HTTPS files with MAMP
How do banks remember "your computer"?
Avoid traffic shaping by using ssh on port 443
Convince Firefox to send an If-Modified-Since header over HTTPS
How do you redirect HTTPS to HTTP?
Using mod_rewrite to Mimic SSL Virtual Hosts?
Options for Google Maps over SSL