Question

I am going to create a iPhone application that will be having the user login (username/pass) mechanism. on the server side i am using PHP.

i want to know the best practices for this kind of client/server authentication and session management.

looking for replies. Thank you.

Answer 1

you can use a token given by the server once it receives the correct userName and passord so every call to the web service by the device is “authenticated” with the received token.

1. so you send user name and password to the server from device
2. server gives back a token to the device
3. the device makes every request with the token, ie: URL/webSErvice/token