Book Image

Apple Pay Essentials

By : Ernest Bruce
Book Image

Apple Pay Essentials

By: Ernest Bruce

Overview of this book

Apple Pay, one of the most talked about offerings of the latest iOS 9 release, is a digital wallet and electronic payment system developed by Apple Inc. Paying in stores or within apps has never been easier or safer. Gone are the days of searching for your wallet, and the wasted moments finding the right card! Now you can use your credit cards and rewards cards with just a touch. It allows payment to merchants, using Near field Communication (NFC), and within iOS apps. Implementing Apple Pay within apps for payment is a bit tricky, but our book solves this problem for you. Whether you are a brand new iOS app developer or a seasoned expert, this book arms you with necessary skills to successfully implement Apple Pay in your online-payment workflow. Whether you are a brand new iOS app developer or a seasoned expert, this book arms you with the necessary skills to successfully implement Apple Pay. We start off by teaching you how to obtain the certificates necessary to encrypt customers’ payment information. We will use Xcode and Objective C for the interface and Node.js for server side code. You will then learn how to determine whether the customer can use Apple Pay, and how to create payment requests. You will come to grips with designing a payment-processor program to interact with the payment gateway. Finally, we take a look at a business-focused view of Apple Pay protocols and classes. By the end of this book, you will be able to build a fully functional Apple Pay-integrated iOS app
Table of Contents (13 chapters)

Implementing secure communication


The configuration described in the preceding sections is only for development. There are several things you need to do when deploying an order management system web app for use by real customers. The client apps used by your customers must also be secure.

Firstly, instead of using a process name and port number in URIs, client apps should use URIs based on a web address, such as http://red.com. You should also configure a computer as your publicly accessible web server, which runs your server process. Depending on the expected traffic volume, you may configure your web server to run several instances of the server web app to process requests from several clients concurrently.

Secondly, you must ensure that the data transmitted between the server and client is secure. By securing data transmission, you ensure that only authorized entities receive the data, that the data is not modified in transit, and that the data cannot be read by third parties. One way to...