The mobile app authentication best practices question is the single hardest one to answer well in mobile application security, because the answers that work for web applications fail in subtle ways on mobile devices. The browser does most of the heavy lifting in a web application's authentication flow — cookie handling, redirect orchestration,...