I wanted to create a React Application that could be unlocked via Face Authentication similar to Windows Hello. How does face authentication work? How can I make this work? Many android applications and iOS applications already have this functionality. Is there any website implementing such functionality?
The WebAuthn API and FIDO2/CTAP2 spec is supported on all major platforms/browsers now, including iOS, Android and Windows 10 (Hello). This means you can implement a similar experience to native iOS apps in a browser application if you wish as well as supporting FIDO compliant security keys also.
You can try it for yourself here: https://webauthn.io/
You'd need a backend that can support registration of credentials and authentication of assertions however. This is potentially non-trivial depending on what you have in play but library support is improving all the time.
Related
I'm planning to create an application for windows that needs access wifi direct api to allow service discovery and advertisement. I come from web and react native background, so after seeing so many options to go with on the microsoft website, i'm not sure what should I go with.
On the microsoft's choose your platform page (https://learn.microsoft.com/en-us/windows/apps/desktop/choose-your-platform), they also mentioned PWAs (although close to the bottom). And after checking the PWA page, i'm not sure if it allows access (and to what extent) to the native API, the wifi direct api in particular.
So can someone please tell me if it's possible to access wifi direct api in a PWA and should I really go with PWAs?
Is it possible to access wifi direct API and other windows APIs in PWA for windows 10?
If you plan to build your UWP application through PWA and use some WinRT-API, you need to use Visual Studio 2017.
PWA could access native api with WinRT, but Windows will remove Edge-UWP step by step in the feature, it is may not good recommendation.
For accessing navtive api with WinRT, please refer here. Please note before access WinRT, you need to add the webset uri then set WinRT access as all in package.appxmanifest Content URIs tab.
I have this scenario ahead and I'm wondering if someone has already tried to run IdentityServer4 on mobile device since it supports .net core?
In theory you can. however IdentityServer4 is an ASP.NET Core middleware that relies on ASPNETCore.MVC which means it needs to be hosted. If you can figure out how to host a standard MVC application on the mobile device then you can add the IDS4 middleware to it.
You might need to jump through many hoops though but I have seen apps of phones that actually are "webservers" (AirDroid for example)
I'm working on an AngularJS mobile web app and am getting ready to deploy to Firebase Hosting. Does anyone know how to ensure that only devices can install the web app and prevent desktop browsers from viewing? I'm trying to protect the client's intellectual property as well as my own by making a reasonable attempt to disallow the source code from being read. Thank you!!
It's not possible to prevent the reverse engineering of any web application.
Developing a mobile application using native code may make you feel more secure about the intellectual property, however once a would be attacker gets the software on to their own hardware they will have the opportunity to defeat your software.
I wound up using ng-device-detector to determine whether the user was using a mobile device or not, and delivering a different template page depending. This library contains an isMobile() function that works great.
I'm in the process of making an app for my assessment at uni using cordova/phonegap and was just wondering if its possible for me to use data from a my unis ecom website for my app without having any back-end access to it, so like images/prices/descriptions...synced to my app?
yes it is certainly possible, because Cordova means working via Javascript and a HTML5 Rendering Engine. It is with some reservations entirely possible to load data from an webserver and use it in an App.
The only thing is to ask, whether it is also a smart-choice. If you want your app not to break when the data from the website gets changed (see https://en.wikipedia.org/wiki/Link_rot )
Also the server can somewhat prevent access of data from contextes outside of the webpage, especially if TSL/HTTPS connection is offered and content is only available after authentication.
Yet anyway its the magic of Javascript to be very good in doing things with web/online resources and displaying HTML5. Cordova and PHonegap is hence imo much better than the very challenging JAVA-Dalvik and IOs native programming that one would have to use else
Likely not,
Google and Apple frowns on using apps as wrappers for websites.
Quote Google Developer Program Policies - Spam and Placement in the Store
Do not post an app where the primary functionality is to:
Drive affiliate traffic to a website or
Provide a webview of a website not owned or administered by you (unless you have permission from the website owner/administrator to do so)
And
Quote Apple iTunes Guidelines - 2.12
Apps that are not very useful, unique, are simply web sites bundled as Apps, or do not provide any lasting entertainment value may be rejected
Being a Java developer, i am super excited to use codenameone for an app that I am planning to write from scratch. But would like to know if codenameone supports activity detection which uses CMMotionActivity in case of ios or Google Play Services ActivityRecognition API in case of android ?
Particularly, my app would like to receive events when the user is stationary, walking, running, cycling, driving/automotive etc. Also, if i can fine tune the battery usage settings in case of location services subscription as provided by Google play services location apis, that would be great.
I hope i wont get disappointed. I was planning to learn codenameone and use it in my app only if these above features are available
I'm afraid they aren't available out of the box. However, Codename One is very flexible and you can use native interfaces to expose these features by invoking native code.