We're developing android app that has native login form(intent)
and WebView
.
We require user to get client certificate from api
before login, and use it when user login(api).
And I plan to store the certificate that user install as PKCS12
file in private storage of app.
Now, I have to survey the way I said above is in common. Please give your opinion and if you don't agree and have another idea, teach me. thank you.