[FIXED] mobile application: how do I provide client authentication

Issue

I had an idea for a fitness mobile app and I have been developing applications based on this idea for iPhone (Obj-C based), Android (java based), WebOS (html5 based) and Nokia Qt.

I now need to provide authentication to the users of my application. The server is a typical LAMP system. I would like the users of my mobile application to log in to the server seamlessly and securely.

I am not really a web programmer and hence would appreciate ideas on how I can go about providing authentication. I've heard about OpenID...but I am not sure if it can be used for authenticating mobile clients. Some one mentioned OAuth but I am not sure if a) it would work in this use case and b) What if my client does not have a Facebook/Twitter account?

Any ideas will be appreciated!

Solution

If you already have a LAMP server somewhere, it should be fairly easy to set implement your own API for password authentication -- the important thing is that you do it via HTTPS! (so the user-ids / passwords can not be sniffed). You will need a digital certificate (CERT) for your web-server.

On your LAMP system you can keep the user data in it's database. Your LAMP server should also allow to create a local user account (of course).

You can use this solution either separate or together with OpenID or OAuth!

That means, if your client doesn't have Facebook or Twitter, they can still create an account on your LAMP server.

http://en.wikipedia.org/wiki/OAuth

Answered By - Tilo