I want to use Apple Push Notification Service, so I need a server. This server will have to check a site every x minutes.
How the site that has to be checked requires the user to login.
So is it ok security wise to get the user to login on a web browser, then upload the cookies which contain the session information (not the user's username or password) and store them in a database which is just one table, with 2 fields, 'cookies' and 'deviceToken' so that the cookies are associated with the device token.
Then perform requests from the server to the site with the user's cookies, on the user's behalf, and if the site has changed push a notification to the user.
Is this a secure method and how exactly would I implement this so that noone else can get access to the database and download the cookies?
Also as long as I let the users choose to enable or disable push notifications (neither opt-in or opt-out) is this morally ok?