- In my application, I build
REST APIs so that user can interact with my application server.
Since I do not want to maintain User/Passwords, my
iOSapp authenticates client using Google. This all happens on
Once client is authenticated, I would give a call to my app server to fetch user's data. The problem lies here.
- Now the user is authenticated on mobile client, but on server, I have no idea if the request is coming from a valid user or not.
What are some mechanisms recommended to build trust between mobile client(authenticated with OAuth) and my server APIs