Cloud Storage with iOS app

[maybrain]

Hi, I'm looking to use Google Cloud Storage to store files uploaded from an iOS app on behalf of the app without user involvement.  I would appreciate a quick check of my findings so far from someone more knowledgable.  According to what I've read it seems:

1) I should opt to use v2 of the API

2) This means authentication will be through OAuth

3) For my purposes therefor I want to use the OAuth for Service Applications

4) No client library for iOS exists to create the token request

5) This means writing iOS code to create and sign a JWT

I'm at the formidable step 5 and wanted to make sure I wasn't missing some easier path here.  Thanks!

[Google Storage Team]

Hi Brian,

Your conclusions sound reasonable to me. Here are two additional options for you to consider: 

• If your files are not too large, you could upload them to an intermediary server (e.g. a Google App Engine app), which then forwards the content to its ultimate destination in Google Cloud Storage. This would allow you to limit the scope of cryptographically sensitive information to the server, however, it's obviously inefficient due to the double hop and the requirement to buffer uploads.

• You could generate an HTML form with a signed policy, which your app could use to upload files directly to GCS without explicit authorization. To minimize security risks, you can encode a policy in your form, which could stipulate conditions under which the form may be used (e.g. expiration date/time, which bucket/object to which it applies, etc.). Assuming your iOS app encompasses a server component, your server could generate an appropriately signed POST form as/when needed by the client.

Marc

Google Cloud Storage Team

--
You received this message because you are subscribed to the Google Groups "Google Cloud Storage" group.
To view this discussion on the web visit https://groups.google.com/d/msg/gs-discussion/-/7hdjiLMh35oJ.
To post to this group, send email to gs-dis...@googlegroups.com.
To unsubscribe from this group, send email to gs-discussio...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/gs-discussion?hl=en.