Foundation
This section provides a detailed reference for backend integrations. If you able to use one of our Backend API Quickstarts then you may find this simpler.
Managing API Domains
This provides an overview of the management of API domains in the account. These correspond to the domains for which Approov protection can be applied.
Token Binding
This section covers the optional token binding feature in Approov.
Secure Strings
This is the underlying SDK feature that implements Approov Runtime Secrets Protection. It provides a secure storage capability for secrets or access tokens held by an app. A facility is also provided to predefine secure string values using the Approov CLI. These values are only made available to running apps that pass the selected rejection policy. This provides the usual protections provided by Approov so that only apps passing the attestation process can obtain access to the secrets.
Custom JWTs
This feature provides a facility to fetch custom JWTs via the SDK, where most of the payload claims are defined by the app. This is provided for very specific circumstances where it is not possible to use the claim structure of Approov tokens.