For OAuth token from server for Mobile app, we need to pass Client Secret from Android (and iOS) app which can be compromised easily. I was wondering if you can share best practises to keep Client ID and Client Secret from getting exposed during reverse engg or decompilation.
Cheers,
Raj
For OAuth token from server for Mobile app, we need to pass Client Secret from Android (and iOS) app which can be compromised easily. I was wondering if you can share best practises to keep Client ID and Client Secret from getting exposed during reverse engg or decompilation. Cheers, Raj