Universal Links (iOS)

[ishanijerin1]

overview
Universal Links are a deep link mechanism provided by Apple, and use the normal web link format (https or http).
*Reference: Apple Documentation Allowing apps and websites to link to your content

◇Features

You can set the action to be taken when the app is not installed, not just when it is present on the device.
example
Display any web page
Launch the AppStore app and go to the installation kiribati email address page of the app.
When you open a universal link, no dialog appears and the app launches seamlessly.
◇ Implementation flow

Web side
Decide the domain and path to associate with the app
Place the configuration file (apple-app-site-association/AASA) containing the association information in a location that can be accessed from mobile devices, such as a server.
App side
Enable Associated Domains under Project Capabilities
Add a domain to be associated with Domains
Enable Associated Domains for the app in Apple Developer
Implemented processing when launched via universal link
Important points to note
Cost
To use web links, you will need to prepare a server and your own domain.
Security
Creating an association between your app and your website is more secure than a custom URL scheme, but Apple's official documentation states the following:
Warning
Universal links offer a potential attack vector into your app, so make sure to validate all URL parameters and discard any malformed URLs. In addition, limit the available actions to those that don't risk the user's data. For example, don't allow universal links to directly delete content or access sensitive information about the user. When testing your URL-handling code, make sure your test cases include improperly formatted URLs.

(↓Rough Japanese translation)

Universal Links potentially provide attack vectors, so be sure to validate all URL parameters, discard malformed URLs, and limit the actions available in universal links to avoid putting user data at risk.

Restriction example
Prevent content from being deleted directly via universal link
Prevent access to sensitive information about users