3rd Party are developing an iOS Native App for us which will use SKY API to access our data in RENXT - best way to do authorisation?

Debbie Kelly

Hi


Has anyone got any experience of this?


This is a first SKI API app development for both us & our 3rd party software developer. Looking to learn from the experience of others if possible, any hints & tips which will smooth the way or help us to avoid pitfalls would be much appreciated.


From looking at the authorisation documentation we understand that there are 2 options available: Authorisation Code Flow & Implicit Flow


Our understanding is that for an iOS native app that the Implicit Flow would be the recommended way forward. However we don't want our end users of the App to be interrupted & have to go through a relogin/authorisation process every 60 min when the access token expires or if this is unavoidable we would at least like to minimise the impact of the interruption on the app user. Our application will be used in a customer facing environment so we want to reduce/avoid interruption to the service we provide our customers.


If you have experience of this & can recommend a way forward that would be really helpful.


Thanks

Debbie