从服务器下载的应用内购买的可能安全措施
我正在开发一个应用程序,它在很大程度上依赖于用户能够购买从服务器下载的内容。随着应用程序接近完成,我越来越关心我当前的分发模型,即当用户购买商品时,应用程序会生成正确的 URL 并下载数据(例如,从 www.website.com/content/音乐.mp3)。
我有一些简单的 Web 开发经验,但我不知道有任何身份验证过程来确保只有我的 iPhone 应用程序可以访问此内容。换句话说,只要有人检测到传出的 URL 请求,他们就可以免费获取我的内容。我能做些什么来预防、阻止甚至强烈阻止这种情况发生吗?
I have an app I'm developing which relies heavily on users being able to purchase content which will be downloaded from a server. As the app nears completion I'm becoming more concerned about my current distribution model, which is simply that when the user purchases an item the app then generates the correct URL and downloads the data (e.g., from www.website.com/content/music.mp3).
I have some simple web development experience, but I'm not aware of any authenticating process to ensure that only my iphone app has access to this content. In other words, as soon as somebody detects the outgoing URL request, they could get my content for free. Is there anything I can do to prevent, deter or even strongly discourage this?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
将收据发送到您的服务器,验证收据并为该文件创建一次性 URL。
Send the receipt to your server, verify the receipt and create a one-time-url for the file.