Recommended architecture
Mobile App
The SDKand shows friendly responses.
Backend
Genera tokens, protect credentials, register operations and confirm final results.
Mobile Security
Tokens
Tokens
- Genera
Access Tokenfrom backend. - Do not persist sensitive tokens in unsafe storage.
- Avoid printing tokens or complete payloads on login.
Private SDKs
Private SDKs
- Don’t come up
.aar,.xcframeworkor private ZIPS to public repositories. - Use the version delivered or approved by the integration team.
- Valids compatibility before upgrading dependencies.
Reg. SDK
Reg. SDK
- Use callbacks / delegates to update user experience.
- Confirm states from backend as required by the method.
- Drive cancellation, error, timeout and back of the app.
Recommended Validation
- Test Android e iOS separately.
- Validate approved, refused and controlled errors.
- Review behavior with bad connectivity.
- Keep operation number and minimum login for support.
Integration checklist
Check the specific checklist for SDK Mobile.

