Develop mobile app and server-side session state management and interaction

When we are doing web development, we usually use cookies or session to save the user's login status, verify whether the user has access to some pages that need to log in by checking the cookie or session data, this is done through the browser, this is the B/s architecture, But what if the client is a mobile app? Because this is the C/s architecture, it is not possible to use a cookie or session to verify the user's status, as if the browser has disabled cookies.

Fortunately, this is a workaround, in the case of disabling cookies, you can pass the session_id through Query_string, that is, after the app sends a login request, the server can pass session_id to the app, then the app saves the session _ID on mobile devices, in those functions that require login access, each interaction request is accompanied by a parameter session_id, routed to the server side, and the server-side checks the legitimacy of the session_id to determine if the user is logged in.

Here's a simple mobile development example that doesn't use native, but uses Appcan to build the app:

1. App Login Request:

2. var url = ' http://127.0.0.1:8080/index.php?act=login&[email protected]&pwd=123456 ';
4. $. getjson(url,function(res) {
6. if(res. Ok = = ' yes ') {
8. var storage = window. Localstorage;
10. if(storage) storage. SetItem(' Sid ',res. session_id);
12. }Else{
14. Uexwindow. Toast(0, 5, ' login failed! ', 4000);
16. return;
18. }
20. }, ' json ',null, ' POST ', ', ' );

2. App Request user information:

2. var sid = ';
4. var storage = window. Localstorage;
6. If(storage) sid = storage. GetItem(' Sid ');
8. var url = ' http://127.0.0.1:8080/index.php?act=uinfo&session_id= '+sid;
10. $. getjson(url,function(res) {
12. if(res. Ok = = ' yes ') {
14. var uname = res. Username;
16. Uexwindow. Toast(0, 5, ' username: '+uname, 4000);
18. return;
20. }Else{
22. Uexwindow. Toast(0, 5, ' please login first! ', 4000);
24. return;
26. }
28. }, ' json ',null, ' POST ', ', ' );

3. Server-side PHP response request [index.php]:

2. <? PHP
4. /**
6. * User:wudiweb.com
8. * App and server-side Simple example
10. */
12. Header("content-type:text/html; charset= ' Utf-8 ');
14. Session_Start();
18. $act = $_request[' act '];
20. $result = array(' OK ' = ' yes ');
24. If($act = = ' login ') {
26. $email = $_request[' email '];
28. $pwd = $_request[' pwd '];
32. if($email = = ' [email protected] ' && $pwd = = ' 123456 ') {
34. $result[' session_id '] = session_id();
36. }Else{
38. $result[' OK '] = ' no ';
40. }
42. }ElseIf($act = = ' uinfo ') {
44. $session _id = $_request[' session_id '];
46. if($session _id = = session_id()) {
48. $result[' username '] = ' wudiweb ';
50. }Else{
52. $result[' OK '] = ' no ';
54. }
56. }
60. echo Json_encode($result);
62. Exit;

Note that this is only a simple usage, and if you think it is not perfect, you can extend it on this basis, such as encryption session_id.

Develop mobile app and server-side session state management and interaction