Thursday, July 6, 2017

Re: [google-cloud-sql-discuss] Building my first app

Hi,

We generally recommend that you don't connect directly to Cloud SQL from an app. Doing so
  1. Is very difficult to implement securely. If you put the database username/password into the app, it can be extracted and used by an attacker to do whatever they want to you database.
  2. Makes upgrading the database later very difficult. If you need to change the database schema, you will need support for the new schema in every bit of software connecting. This is easy with a server-side app where you control deployment, but much harder with mobile apps.
  3. Stops users accessing the app from behind a firewall that blocks the database port. This is common on corporate networks or free wifi.
It's generally better to have your app talk to a webservice, and have that webservice use the database. For example you could use Cloud Endpoints and App Engine to create an API for your app to connect to. Or if you want a simpler solution, consider Firebase, which is specifically designed for user/data management for mobile apps.


On Thu, Jul 6, 2017 at 11:44 AM, Jeff Spurlock <jspurlock54@gmail.com> wrote:
Hello, I don't know if this is the best place for this, but I'm new to app development, and I'm building my first iOS app. I'm looking to put everything in the app behind a login screen, and I want the user log ins to be stored on a SQL instance. I've created a free trial in Cloud SQL, but I'm looking for some tutorials or instructions for beginners on how to get my iOS app to talk with the sql instance and allow for user log ins. additionally, I want to have another instance logging some information each time a user performs a specific action. 

Does anybody have any tips or tutorials on where I can find this information? Extreme newb here trying to "learn by doing" at the moment. Thanks in advance for any help!

--
You received this message because you are subscribed to the Google Groups "Google Cloud SQL discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-sql-discuss+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sql-discuss/4fa45aae-38b2-4807-8e42-ddc9c46c230f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "Google Cloud SQL discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-cloud-sql-discuss+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-cloud-sql-discuss/CAJZK_bY0ZtVgxePFTZw95yfA7sOa0n11yZCY%3D-aGG8sS1DE%2BHg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

No comments:

Post a Comment