device-integrity

Verify that requests to your server come from a genuine Apple device running your unmodified app. DeviceCheck provides per-device bits for simple flags (e.g., "claimed promo offer"). App Attest uses Secure Enclave keys and Apple attestation to cryptographically prove app legitimacy on each request.

DCDevice generates a unique, ephemeral token that identifies a device. The token is sent to your server, which then communicates with Apple's servers to read or set two per-device bits. Available on iOS 11+.

Your server uses the device token to call Apple's DeviceCheck API endpoints:

使用 DeviceCheck（DCDevice 每设备位）和 App Attest（DCAppAttestService 密钥生成、证明和断言流程）验证设备合法性和应用程序完整性。在实施欺诈预防、检测受损设备、通过 Apple 服务器验证应用程序真实性、通过经过验证的请求保护敏感 API 端点或向后端架构添加设备验证时使用。 来源：dpearson2699/swift-ios-skills。