Introducing Expo App Integrity: Protecting your backend from unauthorized clients

Expo has introduced @expo/app-integrity, a library designed to enhance app security by integrating platform app attestation services into Expo projects, specifically for Android and iOS devices. It uses Google Play Integrity and Apple App Attest APIs to verify the authenticity of app instances, thereby preventing unauthorized access by modified clients, emulators, or scripts. On Android, it follows the Play Integrity request flow, while on iOS, it employs the App Attest process, both involving server-side verification of integrity tokens or keys to decide whether to allow, limit, or block requests. The library is currently in its alpha stage, available as part of the SDK 54 release, and invites user feedback and contributions to help refine its functionality. Users are encouraged to apply integrity checks selectively to high-risk actions like transactions or content access, starting small and expanding as necessary.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.