I am currently developing an innovative android app that incorporates a thrilling raffling system. To ensure user security and authentication, individuals are required to log in via Google OAUTH. After successfully logging in, users must perform specific actions within the app to earn valuable raffle tickets. These ticket-earning activities will trigger a secure POST request to my robust backend server, where the received data is carefully stored along with the corresponding ticket number. Nevertheless, I am keen on exploring potential measures to thwart any malevolent users who may attempt to deceive the system by generating fake requests in order to unfairly increase their number of tickets.
My initial idea revolves around leveraging the powerful Google OAUTH login system to generate a unique token for each authenticated user. This generated token can then be securely transmitted to my server for further validation using cutting-edge frameworks like Passport.js. Once the verification process confirms the authenticity of the Google token, I shall proceed to update the central database accordingly.
I wholeheartedly welcome any suggestions, constructive criticism, or novel ideas you might have regarding this matter. Your insights and recommendations would greatly contribute to enhancing the overall integrity and fairness of our raffling system.