android - google cloud storage temp credentials -
if mobile app allows users upload directly google cloud storage without going through web servers, there concept temp credentials given users? or there other ways implement such not need expose own credentials in app?
i think that's oauth for, , oauth used of google api's. idea being - have indicated - there no way secure credentials on customers' device client key's (as opposed server keys) not allow direct access services/api's. instead, client key (which ship app) used more identifier key: allows client request temporary access token oauth server (which google runs, in case), can used access services/apis.
this layer gives more control, e.g. can associate restrictions (e.g. client ip address) client key.
on whole doesn't seem perfect solution, , introduces additional complexity, meant address concern concern.
regarding implementation on android, using google client library java, , has support google's oauth2 in it.
read here more:
https://developers.google.com/accounts/docs/oauth2
Comments
Post a Comment