Authentication

Server address

Before using the SDK, point both the SDK and the service client to the Prove ID environment:

import RKYC_iOS
import ProveIDApiClient

let serverUrl = "https://test.api.proveid.io"   // test
// let serverUrl = "https://api.proveid.io"     // production

EndpointManager.SERVER_URL = serverUrl
ProveIDApiClientAPI.basePath = serverUrl

Do this once when the app starts, for example in application(_:didFinishLaunchingWithOptions:).

Access token

Every ProveIDApiClient call sends the headers in ProveIDApiClientAPI.customHeaders. Set the access token there:

ProveIDApiClientAPI.customHeaders["Authorization"] = "Bearer \(accessToken)"

Don’t put your API username and password in the app

Prove ID API credentials can easily be extracted from an app bundle. Keep them on your server only.

The recommended setup, as with the Web SDK, is to obtain the access token on your server and hand it to the app as a short-lived token. When it expires, get a new one from your server and set the header again.

To be completed

The supported way of issuing a short-lived token for the iOS SDK and its lifetime are to be added here by the Prove ID team.