Skip to content
- No API username or password in the app code,
Info.plist, .xcconfig files or the source repository.
EndpointManager.SERVER_URL and ProveIDApiClientAPI.basePath point to production (https://api.proveid.io).- The access token comes from your server and is renewed when it expires.
NSCameraUsageDescription and NFCReaderUsageDescription explain clearly why they are needed (App Review checks them).- The NFC capability and the
A0000002471001 identifier are in the release build’s entitlements and Info.plist.
- The camera permission is requested before the camera screen; users are guided to Settings if they deny it.
- The NFC step is hidden on devices without NFC.
- Document images are not saved to the photo library or the file system.
- Liveness and hologram videos are deleted from the device after sending.
PassportReaderEvent.logLevel is .none; no NFC logs are written to the device.- App Transport Security doesn’t allow cleartext (HTTP) traffic.
- Users get a clear path for every error (see Errors).
- The verification decision is made on your server, not in the app.
- Tested on several iPhone models, in low light, with and without NFC.
