The app login mechanism

1, each time the app sends a request, will send the header to the server, the server to verify that the information passed is correct; after successful login, if the incoming information does not conform to the user's information, the server determines that the login to the app failed.

Each request will pass in the field to the server

such as: Request login interface, need to give the phone number, password request server, and then the server check the phone number and password is matched, if matching the interface response to the client several parameters, such as token, SessionID, etc., if the mismatch login failed

After the match succeeds, the client records the credentials returned by the server, then each time the client requests the interface, a specific credential such as SessionID, UID and so on will be passed in the header, and the request fails with the login expiration.

Each request login interface returns a different SessionID

The app login mechanism