Xamarin.Forms Session Management

Question

I am trying to develop a dummy app with Xamarin.Forms and i mainly focus on UWP. I have a login feature for this app and i need to manage sessions. I am consuming a basic web service method for login, it gets user name and password as parameters and returns an access token. I am using this access token for the CRUD operations of this app. This is how i store this access token.

Application.Current.Properties ["access_token"] = token.access_token;

Since i am a newbie for Xamarin i am struggling to understand Session Managament. How am i going to manage a session ? When to expire a session and how ? What might be the security issues ? How can i properly log out a user ?

Any help would be appreciated.

Rohit Vipin Mathews · Accepted Answer · 2017-07-24T12:08:20.037

2

You can use Settings Plugin for Xamarin And Windows.

This plugin saves specific properties directly to each platforms native settings APIs (NSUserDefaults, SharedPreferences, etc). This ensures the fastest, most secure, and reliable creation and editing settings per application. Additionally, it works with any Xamarin application, not just Xamarin.Forms.

Use it from Nuget at - Settings Plugin for Xamarin and Windows 3.0.1

Find the documentation here.

private static ISettings AppSettings =>
    CrossSettings.Current;

public static string AccessToken
{
  get => AppSettings.GetValueOrDefault(nameof(AccessToken), string.Empty); 
  set => AppSettings.AddOrUpdateValue(nameof(AccessToken), value); 
}

Sessions are managed at servers and not clients. You will get a expiration time and maybe a refresh token URL from the server. You can expire the token and delete it when the expiration time is elapsed.

edited Jul 24 '17 at 12:08

answered Jul 24 '17 at 10:23

Rohit Vipin Mathews

11,629
15
57
112

1

Thanks for the answer but i want to know the logic of session managament for a mobile application. – Tartar Jul 24 '17 at 10:40
1

Session management is a server responsibility and not client. Client only uses the session as long as its valid in the server. – Rohit Vipin Mathews Jul 24 '17 at 12:09
The answer here deals only with storage of the token. Mobile applications need to manage session state, to refresh tokens or log a user out when tokens expire. – ColinMasters Jan 23 '18 at 15:59
I dont think that is part of the OPs question or scope. If you have a different question please post one. – Rohit Vipin Mathews Jan 24 '18 at 00:17

Xamarin.Forms Session Management

1 Answers1

Linked