Secure Cordova Template
Note: Moved to github.com/feedhenry/mobile-security-cordova-template
A Hybrid Cordova Application for iOS and Android that demonstrates Secure Mobile Development Practises.
For more information, please check the Mobile Security Project.
Features
-
OpenID Connect Authentication
-
Mobile Access Control
-
Certificate Pinning
-
Client Cert Authentication
-
Device Trust Checks (Root/Jailbreak Detection, Latest OS etc)
-
Secure Storage (Android Keystore, iOS Keychain)
-
Code Obfuscation (Android)
-
Snapshot Caching Protection (iOS)
-
Authenticated Calls to Protected Endpoints
-
2FA with OTP (via Keycloak)
-
Authentication Brute Force Detection (via Keycloak)
-
Account Lockout Policies (via Keycloak)
-
Authentication/Access Control Auditing & Logging (via Keycloak)