August 2020 Summaries

Web developers often face challenges when converting data formats, such as transforming a base64 string into a blob using JavaScript, particularly when APIs require data in specific formats like blobs for images. A blob is a binary data representation that can be used for files, images, or videos. The Fetch API, a feature in web browsers, simplifies this conversion by enabling the retrieval of resources across a network and returning them in various formats, including blobs. By passing a base64 string to the Fetch API and converting the response to a blob, developers can easily upload or display images. Conversely, converting a blob back to a base64 string is more complex and can be achieved using a Promise and the FileReader API. This process was practically applied in a demo app where photos of receipts were taken, requiring conversion for permanent storage. These modern techniques streamline data manipulation, making them less daunting for developers.

Simon Grimm, an Ionic Developer Expert, provides a detailed tutorial on implementing navigation within Ionic modals using the ion-nav component, a solution for handling navigation in overlays that are not part of standard Angular routing. The tutorial outlines the process of starting with a blank Ionic app, creating a custom navigation component with ion-nav, and using it to establish a navigation stack within a modal. Simon explains how to present the modal and integrate navigation functionality, including responding to Android's back button by setting up a handler to manage navigation actions. This approach allows users to navigate within modals independently of the app's URL routing, offering flexibility for complex navigation scenarios. The tutorial also emphasizes the benefits of using Capacitor's livereload feature for testing on devices and promotes further learning resources available through the Ionic Academy.

Mobile app development teams are responsible for ensuring HIPAA compliance, as platforms like Ionic provide the necessary building blocks but do not manage user data or network security directly. Ionic's tools, such as Identity Vault and Encrypted Storage, facilitate secure data storage and encryption, using device capabilities like iOS Keychain and Android Keystore to protect sensitive information with biometric authentication and secure data at rest. Network transport security is crucial, requiring SSL for all data transmissions and techniques like SSL pinning to prevent attacks. Protecting screen data during app suspension and adhering to API terms of service are critical for maintaining compliance. While Ionic focuses on the frontend, collaboration with backend teams is essential for overall HIPAA compliance, with Ionic offering solutions to streamline the development of secure, compliant mobile health apps across multiple platforms.

Ionic has announced that its Appflow platform now integrates with GitLab Self-Managed, allowing users to connect their GitLab Self-Managed code repositories to Appflow for managing native app builds, deploying to app stores, and updating apps over time. Appflow is a mobile DevOps solution that automates the app development workflow across iOS, Android, and the web, enabling continuous integration and delivery. By linking directly with Git version control, Appflow uses the codebase as the source of truth for services like Live Update and Native Builds. GitLab Self-Managed, a private hosted instance of GitLab, offers businesses with rigorous security and compliance needs full control over their environment, including audit capabilities and custom settings. Users can connect their GitLab Self-Managed repository to Appflow by generating a personal access token and linking it through Appflow's settings. The GitLab Self-Managed support is available on Ionic Appflow's Scale plan, and any new commits to the repository will automatically appear in Appflow, facilitating seamless collaboration and deployment.

Many mobile apps face challenges in implementing secure biometric authentication and storing sensitive data, often resorting to inadequate methods such as simply displaying biometric prompts or storing data unencrypted. These common mistakes, such as not using biometric APIs properly or failing to encrypt sensitive information at rest, can expose apps to security risks, especially on jailbroken devices. The gold standard for mobile security involves using comprehensive security APIs on iOS and Android to tie biometric data with encrypted values, ensuring sensitive information is accessible only through genuine biometric authentication. Ionic Identity Vault offers a solution by providing advanced biometric APIs and managing complexities such as user enrollment and device-level encryption, integrating seamlessly with other Ionic enterprise solutions to securely handle authentication tokens and encryption keys.

Adobe's announcement of the shutdown of PhoneGap and PhoneGap Build has posed a challenge for teams relying on these tools for cross-platform app development, particularly given recent iOS 13 build issues. However, Ionic's Appflow offers a robust alternative, serving as a nearly seamless replacement with added features like remote app updating and direct publishing to app stores, which go beyond the capabilities of PhoneGap Build. Appflow supports PhoneGap, Cordova, and Capacitor apps, providing managed build environments for iOS, Android, and web applications. It is designed to enhance productivity and streamline native, hybrid, and Progressive Web App development. The Ionic team is actively investing in Appflow and offers a one-month free trial to new customers using the coupon BUILDWITHUS. The company has also partnered with Adobe to facilitate a smooth transition for users moving from PhoneGap Build, underscoring its commitment to becoming a leader in cross-platform hybrid app development.