Android and iOS implementation checklist

Android and iOS implementation checklist

Use this checklist for implementation, QA, and release sign-off.

Session and security

• Store tokens only in platform secure storage and prevent parallel refresh requests.
• Never log credentials, tokens, provider upload URLs, or push tokens.
• Register the device after login and deactivate it during logout.

Composer and media

• Use social_networks[].id as network_connection_id and respect capability flags.
• Create or restore content before uploading or generating media.
• Remember that saving targets replaces the complete selection.
• For video, run initialize, provider upload, and completion in order without altering object metadata.
• Reload content details after media changes.

Validation and publishing

• Validate immediately before publishing and map errors to the correct network and field.
• Create one idempotency key per publish or retry action.
• Persist publication_id and poll per-target status with bounded backoff.
• Retry only failed or rejected targets with a new key.

QA

• Test token expiry, offline interruption, duplicate taps, app restart, partial failure, and retry.
• Report Story posted only after native confirmation.
• Verify that errors do not expose inaccessible brand or content ownership.