Mobile Integration
This guide explains how to integrate the Verifymy verification flow within a WebView for iOS and Android applications.
Prerequisites
- Verifymy API credentials: API Key & Secret Key
- Your application’s callback URL is registered with Verifymy
General Requirements
- WebView must have JavaScript enabled
- Camera permissions must be requested and granted for ID verification, and facial age estimation
- Local Storage must be enabled
- HTTPS connections must be allowed
- Redirect handling must be implemented for the callback URL
ℹ️ INFO: Complete Examples Available
Download Android Example: Kotlin implementation with WebView integration, camera handling, and verification logic.
Download iOS Example: Swift implementation with WKWebView integration and verification support.
Best Practices
Error Handling
- Implement proper error handling for network issues
- Show user-friendly error messages
- Provide retry options when appropriate
Security
- Use HTTPS for all network communications
- Never store API credentials in client-side code
- Implement proper HMAC signing for API requests
- Validate callback parameters
User Experience
- Show loading indicators during verification
- Handle device rotation appropriately
- Implement proper back button handling
- Provide clear feedback on camera permissions
Testing
- Test with different device types and OS versions
- Verify camera functionality
- Test poor network conditions
- Verify callback handling
Common Issues
Camera is not working
- Ensure proper permissions are requested
- Verify WebView settings allow camera access
- Check for HTTPS connection
Callback Not Received
- Verify callback URL is registered correctly
- Check URL handling implementation
- Verify network connectivity
Session Issues
- Ensure cookies are enabled
- Verify proper handling of redirects
- Check for proper CORS settings
Console Warnings
The following warnings may appear in the console:
[Violation] Permissions policy violation: accelerometer is not allowed in this document
The deviceorientation events are blocked by permissions policy. See https://github.com/w3c/webappsec-permissions-policy/blob/master/features.md#sensor-features
The devicemotion events are blocked by permissions policy. See https://github.com/w3c/webappsec-permissions-policy/blob/master/features.md#sensor-features
These warnings can be safely ignored. They do not affect the verification process since they are related to a third-party library.
on this page
