Umm, how do I know whether the site is using CloudFlare? :-)

Yet another dummy question. How does one add an SSL certificate to a site hosted on 10Centuries? :-)

I will store it in the app database. The config will be, of course, fetched over encrypted connection.

//

I'm going to implement handling of the client GUID in a bit different way. I will fetch some configuration from a JSON file (online) during the app launch, and that configuration will contain the GUID. That allows me to make the app general, and if I ever open source it, the next developer can replace the URL of the JSON file with the one that hosts their own client GUID.

//

Yeah, that's what I was able to figure out from the API description. :-) I think I will make my login process as simple as possible, that way I don't need to take into account some weird edge cases with network conditions, etc.

OK. I was just thinking about the whole login process, and what kinds of errors could happen during it.

I would assume so, as that behavior is needed to allow a user to log in from the same app on two separate devices, right?

If a user logs in again without logging out in between, the API returns a new authorization token?

Ha! Login works, login works! Insert evil laughter here.

It's all ~4–6 mm long, so no…