Skip to main content

Test and Monitor

Before blocking traffic, use monitoring to confirm that the app, Approov cloud, and backend are all behaving as expected.

Watch Approov Metrics​

Use Approov metrics to confirm that real app activity is appearing and to review any attestation failures.

The metrics reference starts with Grafana Overview.

Generate Example Tokens​

Example tokens let you test backend verification without needing a full app request every time:

approov token -genExample your.domain

You can also generate an invalid example token to test rejection behavior:

approov token -genExample your.domain -type invalid

Example tokens are covered in Generating Example Tokens.

Use Loggable Tokens During Debugging​

Loggable tokens can help you debug integration behavior without exposing the real token value. Use them when you need visibility into the flow, then remove or reduce logging before production enforcement.

See Loggable Tokens.

What to Check Before Going Live​

Confirm that:

  • Expected app versions are receiving valid tokens.
  • Backend token validation works for valid, invalid, missing, and expired tokens.
  • Metrics do not show unexplained rejection spikes.
  • You understand how to temporarily disable backend enforcement if needed.

Next, go live by moving carefully from monitoring to blocking.