...
Table of Contents | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|
|
Overview
Here we need to mention that the The whole solution consists of your app, Gini Bank SDK, and the Gini Pay API. Your banking app uses Gini Bank SDK, while Gini Bank SDK uses the Gini Pay API. It is within the Gini Pay API where data extraction takes place. The method of connecting to the Gini Pay API depends on the type of network configuration that you choose. On this page, you can get familiar with possible data flow while using different network configurations. These are Default Networking, Custom Networking, and combining Custom Networking with your own API.
...
Drawio | ||||||||||||||||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
As mentioned previously, one of the possible options is Default Networking. If you choose this configuration type, we’ll Default Networking, we provide you with a helper method connecting you to the Gini Pay API. We recommend using this option.
...
If you require specific communication with the Gini Pay API, use Custom Networking and make a connection yourself with the help of the Gini Bank API Library.
Custom Networking with user center API
...
Additionally, you can implement the communication with your own API.You might’ve noticed, the last action of the user flow involves cleaning up and sending feedback. To read more about this step, open the next section Cleanup and Feedback
...
Certificate pinning
Certificate pinning is a security measure used to make sure your web or mobile app only connects to specific, pre-approved servers. It helps protect your users from potential security risks, like man-in-the-middle attacks or fake websites.
Normally, when your app communicates with a server, it checks the server's digital certificate to verify its identity. But sometimes, attackers can create fake certificates that pretend to be from the real server. This is where certificate pinning comes into play.
With pinning, instead of just trusting any certificate that appears valid, your app will "pin" or save the real certificate's details (like a fingerprint) the first time it connects to the server. In the future, when your app communicates with the server again, it will check if the pinned certificate matches the one from the server. If they match, it means the connection is secure, and your app can proceed with confidence.