How do I prevent abuse to my app?

• Obfuscate

  1 977 4.9 C++

  Guaranteed compile-time string literal obfuscation header-only library for C++14 (by adamyaxley)

if you hardcode the api key into your app, the apk can always get decompiled (apk -> dex -> dex2jar -> jar -> java decompiler). I personally hardcode sensitive api keys in C code, as #define constants. I use this class to obfiscate the C string constants. then I expose functions returning the api keys from C to java via JNI. I also use a mechanism to verify the apk signature, so that the C methods will only be called from the correct application (without this, others could take the .so library, include in their project, and just call the c functions from java / kotlin side, to get the api key). There was an article about this online, but i cannot find it right now.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

Suggest a related project