How to allow connections only from authorized iphone apps to backend - ios

We are developing an iPhone app that connects to a custom AWS API we build. Besides Oauth, is there any other way we can only allow our paid users to connect to our backend api? Meaning, is there some sort of key that can be assigned to users that buy our apps tied to there apple id's they paid with possible or maybe there MEID?

Related

React Native Application - How can i add Intune MAM SDK to specific clients?

My App works for different clients (based on the configurations after the actual login).
I want to integrate Intune MAM SDK into a specific client. It need not affect the other clients (meaning should not affect the MAM policy to other clients)
Scenario:
let's take two clients A and B.
A wants to integrate Intune MAM SDK
B doesn't want to integrate the SDK
Expecting:
if B downloads an app from the google play store or apple store, he can able to use an app with a normal login flow.
but if A download app from stores, he should not able to use the app with normal login flow. (he needs to download an app from the company portal to control the app. Then login needs to work)
is there any way we can get to know that app downloads from the company portal not from stores (make sure that it should affect the other client's login flow)
Can anyone tell me how can I achieve this?

Multiple installations of Client-Server app and OAuth redirect

We develop .net core based web server app with web browser client. This app will be installed on our client's dedicated servers. Our app will include, among others, contacts and calendars and we want to allow users sharing data between our and cloud agendas (via Azure graph-api, Goods api) .
We registered our app in Azure (for now, we assume it will be very similiar for Google) and got some codes (client, secret etc.). Now, we are not sure, what's corrent auth/usage flow.
Client side - a new browser window will be displayd to the end user, asking for grand types and login, but then the server should ask for an access token, as it will interoperate then. As I understand - this is done by using "redirection_uri" going to the server address.
The main problem here is that when registering our app in cloud environment, limited redirection address list is defined and checked later with "redirect_uri" parameter. Our application will be installed on customers' servers and we don't want to force them to register their own applications in the cloud's administrations as they even will not have their own cloud subscriptions.
Edit 2020-11-18:
I'll try to describe again what is our task we want to find solution for:
We develop web app with browser based clients
We sell this app to other organizations and they will install it on their own servers and will have their own customers (final customers) using this app
These organizations don't have to have O365 subscriptions
We, as developers, want our internal app calendars and contacts (among others) to be connected to final customers' Azure/Google calendard and contacts.
It means, that the synchronization itself will be between organization's instance of our app and their customer's Azure/Google calendars/contacts.
I'm sure this must be quite common problem but I have't found any reliable answer.

iOS Developer Account - Multiple apps for Multiple clients

I am currently working in a company that make mobile applications for multiple client, our clients varies from companies to government organizations, It's possible to create one apple developer account to publish all the apps on the app store ?

Can I publish IOS apps for different clients to one account?

I'm looking for Info regrading the possibility of publishing my clients apps that our company developed through our App Store account. Is this allowed by Apple? or Should we purchase separate accounts for every client for hosting the apps?. (We have few big clients and trying to avoid any legal complications after publishing the apps).
It depends. If you're making an app for multiple clients using the same template, then it will get rejected. Apple made some changes regarding white label apps this year. It seems that your clients will have to purchase their own developer accounts to publish their apps.From the App Store Review Guidelines Section 4.2.6:
4.2.6 Apps created from a commercialized template or app generation service will be rejected unless they are submitted directly by the
provider of the app’s content. These services should not submit apps
on behalf of their clients and should offer tools that let their
clients create customized, innovative apps that provide unique
customer experiences. Another acceptable option for template providers
is to create a single binary to host all client content in an
aggregated or “picker” model, for example as a restaurant finder app
with separate customized entries or pages for each client restaurant,
or as an event app with separate entries for each client event.
I've seen a few developer businesses walk their clients through the process of purchasing a developer account and making the developer a lead role in the client's team so that they may publish and maintain the app for their client while still using the client's developer account.It might be a possibility for you too.

Paypal - IOS SDK - Business account / sole trader

We are creating an IOS app and we'd like to use your IOS SDK for payments on behalf of our clients clients. We have implemented your SDK into our app and all works great and we are really happy with it but we just have a few things we'd like to clarify if possible?
Our app is for personal trainers and we want to be able to offer them the facility of charging their clients for services in app. So the Paypal account would need to be setup in the personal trainers name, they would need to create a client id and then enter their paypal email and account ID information into the apps CMS - which would then be fed securely into the app which is used by their clients to order services.
The SDK requires a client ID and registered email - which we were able to create in our business account via a rest api. Our question is whether this process would still work if the Personal Trainer registered their Paypal account as a sole trader - or would they need a business account to create a client ID?
It has to be Business account.
https://developer.paypal.com/webapps/developer/docs/integration/admin/manage-apps/#upgrade-your-paypal-account-as-necessary
Just to understand your question is the same as ours.
We have an app for a client.
We want to integrate payment for them in the app.
With Paypal iOS SDK the parameters initWithClientId and receiverEmail need to be obtained by our client from paypal by registering for a developer api?
Why would a business register for a developer api?
payerId is our client's customers paypal/emailid?
With MPL this was not needed?
Thanks.

Resources