Skip to content

Commit a04c87a

Browse files
committed
Moved the quickstart to the simpler format.
Signed-off-by: Exadra37 <[email protected]>
1 parent 33c23ef commit a04c87a

File tree

15 files changed

+486
-68
lines changed

15 files changed

+486
-68
lines changed

EXAMPLES.md

Lines changed: 18 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -92,6 +92,22 @@ or get a bash shell inside the container:
9292
sudo docker-compose run --rm --service-ports approov-token-binding-check zsh
9393
```
9494

95-
## Support
95+
## Issues
9696

97-
If you find any issue while following this quickstart then just open an issue on this repo with the steps to reproduce it and we will help you to solve them.
97+
If you find any issue while following our instructions then just report it [here](https://github.com/approov/quickstart-php-laravel-token-check/issues), with the steps to reproduce it, and we will sort it out and/or guide you to the correct path.
98+
99+
100+
## Useful Links
101+
102+
If you wish to explore the Approov solution in more depth, then why not try one of the following links as a jumping off point:
103+
104+
* [Approov Free Trial](https://approov.io/signup)(no credit card needed)
105+
* [Approov Get Started](https://approov.io/product/demo)
106+
* [Approov QuickStarts](https://approov.io/docs/latest/approov-integration-examples/)
107+
* [Approov Docs](https://approov.io/docs)
108+
* [Approov Blog](https://approov.io/blog/)
109+
* [Approov Resources](https://approov.io/resource/)
110+
* [Approov Customer Stories](https://approov.io/customer)
111+
* [Approov Support](https://approov.zendesk.com/hc/en-gb/requests/new)
112+
* [About Us](https://approov.io/company)
113+
* [Contact Us](https://approov.io/contact)

OVERVIEW.md

Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
# Approov Overview
2+
3+
[Approov](https://approov.io) is an API security solution used to verify that requests received by your backend services originate from trusted versions of your mobile apps.
4+
5+
6+
## Why?
7+
8+
You can learn more about Approov, the motives for adopting it, and more detail on how it works by following this [link](https://approov.io/product). In brief, Approov:
9+
10+
* Ensures that accesses to your API come from official versions of your apps; it blocks accesses from republished, modified, or tampered versions
11+
* Protects the sensitive data behind your API; it prevents direct API abuse from bots or scripts scraping data and other malicious activity
12+
* Secures the communication channel between your app and your API with [Approov Dynamic Certificate Pinning](https://approov.io/docs/latest/approov-usage-documentation/#approov-dynamic-pinning). This has all the benefits of traditional pinning but without the drawbacks
13+
* Removes the need for an API key in the mobile app
14+
* Provides DoS protection against targeted attacks that aim to exhaust the API server resources to prevent real users from reaching the service or to at least degrade the user experience.
15+
16+
17+
## How it works?
18+
19+
This is a brief overview of how the Approov cloud service and the backend server fit together from a backend perspective. For a complete overview of how the mobile app and backend fit together with the Approov cloud service and the Approov SDK we recommend to read the [Approov overview](https://approov.io/product) page on our website.
20+
21+
### Approov Cloud Service
22+
23+
The Approov cloud service attests that a device is running a legitimate and tamper-free version of your mobile app.
24+
25+
* If the integrity check passes then a valid token is returned to the mobile app
26+
* If the integrity check fails then a legitimate looking token will be returned
27+
28+
In either case, the app, unaware of the token's validity, adds it to every request it makes to the Approov protected API(s).
29+
30+
### The Backend Server
31+
32+
The backend server ensures that the token supplied in the `Approov-Token` header is present and valid. The validation is done by using a shared secret known only to the Approov cloud service and the backend server.
33+
34+
The request is handled such that:
35+
36+
* If the Approov Token is valid, the request is allowed to be processed by the API endpoint
37+
* If the Approov Token is invalid, an HTTP 401 Unauthorized response is returned
38+
39+
You can choose to log JWT verification failures, but we left it out on purpose so that you can have the choice of how you prefer to do it and decide the right amount of information you want to log.
40+
41+
42+
## Useful Links
43+
44+
If you wish to explore the Approov solution in more depth, then why not try one of the following links as a jumping off point:
45+
46+
* [Approov Free Trial](https://approov.io/signup)(no credit card needed)
47+
* [Approov Get Started](https://approov.io/product/demo)
48+
* [Approov QuickStarts](https://approov.io/docs/latest/approov-integration-examples/)
49+
* [Approov Docs](https://approov.io/docs)
50+
* [Approov Blog](https://approov.io/blog/)
51+
* [Approov Resources](https://approov.io/resource/)
52+
* [Approov Customer Stories](https://approov.io/customer)
53+
* [Approov Support](https://approov.zendesk.com/hc/en-gb/requests/new)
54+
* [About Us](https://approov.io/company)
55+
* [Contact Us](https://approov.io/contact)

QUICKSTARTS.md

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
# Approov Integration Quickstarts
2+
3+
[Approov](https://approov.io) is an API security solution used to verify that requests received by your backend services originate from trusted versions of your mobile apps.
4+
5+
6+
## The Quickstarts
7+
8+
The quickstart code for the Approov backend server is split into two implementations. The first gets you up and running with basic token checking. The second uses a more advanced Approov feature, _token binding_. Token binding may be used to link the Approov token with other properties of the request, such as user authentication (more details can be found [here](https://approov.io/docs/latest/approov-usage-documentation/#token-binding)).
9+
* [Approov token check quickstart](/docs/APPROOV_TOKEN_QUICKSTART.md)
10+
* [Approov token check with token binding quickstart](/docs/APPROOV_TOKEN_BINDING_QUICKSTART.md)
11+
12+
Both the quickstarts are built from the unprotected example server defined [here](/src/unprotected-server/hello).
13+
14+
15+
## Issues
16+
17+
If you find any issue while following our instructions then just report it [here](https://github.com/approov/quickstart-php-laravel-token-check/issues), with the steps to reproduce it, and we will sort it out and/or guide you to the correct path.
18+
19+
20+
## Useful Links
21+
22+
If you wish to explore the Approov solution in more depth, then why not try one of the following links as a jumping off point:
23+
24+
* [Approov Free Trial](https://approov.io/signup)(no credit card needed)
25+
* [Approov Get Started](https://approov.io/product/demo)
26+
* [Approov QuickStarts](https://approov.io/docs/latest/approov-integration-examples/)
27+
* [Approov Docs](https://approov.io/docs)
28+
* [Approov Blog](https://approov.io/blog/)
29+
* [Approov Resources](https://approov.io/resource/)
30+
* [Approov Customer Stories](https://approov.io/customer)
31+
* [Approov Support](https://approov.zendesk.com/hc/en-gb/requests/new)
32+
* [About Us](https://approov.io/company)
33+
* [Contact Us](https://approov.io/contact)

0 commit comments

Comments
 (0)