device-integrity

Verify that requests to your server come from a genuine Apple device running your unmodified app. DeviceCheck provides per-device bits for simple flags (e.g., "claimed promo offer"). App Attest uses Secure Enclave keys and Apple attestation to cryptographically prove app legitimacy on each request.

DCDevice generates a unique, ephemeral token that identifies a device. The token is sent to your server, which then communicates with Apple's servers to read or set two per-device bits. Available on iOS 11+.

Your server uses the device token to call Apple's DeviceCheck API endpoints:

使用 DeviceCheck（DCDevice 每裝置位）和 App Attest（DCAppAttestService 金鑰產生、證明和斷言流程）驗證裝置合法性和應用程式完整性。在實施詐欺預防、偵測受損裝置、透過 Apple 伺服器驗證應用程式真實性、透過經過驗證的請求保護敏感 API 端點或向後端架構新增裝置驗證時使用。 來源：dpearson2699/swift-ios-skills。