Cascades Development

[dhontecillas]

I'm building a service for my blackberry app. I want users to register to my app using their ppId (https://developer.blackberry.com/cascades/reference/bb__platform__bbm__userprofile.html), so they can login using their different devices.

But since the API calls can receive fake data, I need to check from the server side that the ID that they are sending me is a valid one, and that corresponds to the user name.

Is there any service to check that?  

[MSohm]

You shouldn't receive fake data.  What makes you think that?

[dhontecillas]

Any server API is public, so, anyone could use curl to send me a register request with a random generated 'user id', and I wouldn't be able to tell if that is a real user. So, a simple script could create as many users as wanted, the database could be filled with fake users.

A way to prevent this would be using the typical email registration process, with a link to validate the users. But I would like to have a way to validate a BBM registered user.

[MSohm · Accepted solution]

I see what you mean now.  I thought you were referring to fake data coming from the API itself.

There isn't anything built into ppid to accommodate this.  You'll need to implement some other kind of security measure within your application so that the server side knows that the request is coming from your application and not some other malicious source.

[dhontecillas]

Ok, thanks for the info.