eiam-ch/eiam-android
Watch
2
mirror of https://github.com/eiam-ch/eiam-android.git synced 2026-08-26 10:34:24 +00:00
Code Releases Activity
Read-only mirror of https://github.com/eiam-ch/eiam-android — eIAM. Issues & pull requests at the source.
6 commits 1 branch 0 tags 440 KiB
  • Kotlin 100%
Find a file
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Patrick Amrein 878c8763c5
 Merge pull request #1 from eiam-ch/update-pin 
Update network_security_config.xml
2024-11-08 08:33:25 +01:00
app Update network_security_config.xml 2024-11-04 11:18:54 +01:00
gradle/wrapper initial commit 2024-03-05 13:03:18 +01:00
.gitignore initial commit 2024-03-05 13:03:18 +01:00
build.gradle.kts initial commit 2024-03-05 13:03:18 +01:00
gradle.properties initial commit 2024-03-05 13:03:18 +01:00
gradlew initial commit 2024-03-05 13:03:18 +01:00
gradlew.bat initial commit 2024-03-05 13:03:18 +01:00
README.md initial commit 2024-03-05 13:03:18 +01:00
settings.gradle.kts initial commit 2024-03-05 13:03:18 +01:00

README.md

eiam-android

OIDC Best Practises

✅ OIDC Flow: Authorization code flow

✅ Use PKCE

✅ Use system browser (CustomTab)

✅ Set prompt=select_account / prompt=login to ensure user-interaction while login (instead of non-interactive SSO)

✅ Store tokens (encrypted) in keychain

✅ No tokens in app cache (an ephemeral URLSession is used)

✅ Use certificate pinning for requests to IdP

✅ Logout: drop all tokens

✅ Error handling

✅ Time handling access/refresh token (before expired)