🚀 Feature: Implement App Attest or DeviceCheck for iOS

[bazrafkan]

🔖 Feature description

Implement App Attest or DeviceCheck on iOS SDK and backend to protect server.

Establishing your app’s integrity and ensure that requests from server receives come from legitimate instances of your app.

🎤 Pitch

With implement App Attest or DeviceCheck on iOS SDK and backend to protect server that uses Apple servers to certify that the key belongs to a valid instance of your app. Then you use the service to cryptographically sign server requests using the certified key. Your app uses these measures to assert its legitimacy with any server requests for sensitive or premium content.
For more details please read this doc.

👀 Have you spent some time to check if this issue has been raised before?

• I checked and didn't find similar issue

🏢 Have you read the Code of Conduct?

• I have read the Code of Conduct

[stnguyen90]

Thanks for raising this issue! 🙏 This sounds interesting! We'll keep this mind for our roadmap.

[stnguyen90]

Related issue: #2358

[DH-555]

That's a really good idea.

Play integrity can be also added for Android devices: https://developer.android.com/google/play/integrity

[cddqssc]

This feature is necessary because in reality, it's very easy for people to obtain the project ID and app package name. Anyone can create new users in my project, and I can't determine which users are created by my app. This makes me feel extremely frustrated

[LUK3D]

Do we have some update on this?

[barart]

+1 on this