Application Management

Application List

functional purpose

The permission holder can create applications and obtain the configuration files of the applications to which the team belongs (this file is very important).

Specific functional operations

• Create Application: The permission holder can directly create applications, and the code resources of this type belong to the team to which the user belongs.
• Filter: You can select the team to which the user belongs in the top filter box to further filter the application list.
• Modify: The permission holder can modify the basic description information of the application, and can modify the Package Name of Android or the Bundle ID of iOS.
• Details: The permission holder can view the configuration files of the application (this file is very important) and sensitive APIs.

Mini Program Review

functional purpose

Application administrators and reviewers can approve the application for the release of the mini program version, and can view the information of the mini program that has been put on the shelf in the 'Listed' list.

Specific functional operations

• Filter: You can select the team to which the user belongs and the application to which the user belongs in the top filter box to further filter the review list, or you can select Pending or Reviewed to view the release review record of the mini program in the application.
• Review: Approve the application for the release of the associated mini program in the current application.
• Details: View the review information of the online version of the associated mini program in the current application.

• Released: After approval, the officially released mini program can be viewed in the 'released' list.
• Removed: The application administrator or reviewer can remove the released mini program.

Mini Program QR Code

After the mini program is released, the platform will generate a QR code for the online version of the mini program. You can click the download QR code at the back of the list in the 'released' list. After downloading the QR code, you can use it to distribute and promote it in other online or offline channels, so that more users can scan the code to experience the mini program.

After clicking the download QR code, click download in the pop-up window to save the mini program QR code to the local computer.

TIP

• Android: Open Mini Program - Configure Scheme to open Mini Program
• iOS: Open Mini Program - Open the official version of Mini Program according to the QR code content

Sensitive API Management

functional purpose

Luffa Cloud defines some Mini Program APIs as sensitive APIs. These APIs may obtain sensitive personal information such as location information and biometric information from the host App. In order to ensure the privacy and security of App users, the host App can set the status of these sensitive APIs to 'restricted'. For APIs in restricted state, the Mini Program needs to apply to the host App for permission to call these APIs. After the App approves them, the Mini Program can call these APIs normally. If you feel that the sensitive APIs we provide do not meet your needs, you can also set the APIs of other systems to 'sensitive APIs' and set their status to 'restricted'.

Specific functional operations

Entrance

Sensitive API Status

Public: APIs in public state can be used directly without applying for calling permissions from the application. Click 'Restrict' to change the API status to 'restricted'.

Restricted: For APIs in a restricted state, the mini program needs to apply to the application for calling permissions. Only after the application approves it, the restricted API can be called. Click 'Open' to change the API status to 'Public'.

Expand the sensitive API list

If you feel that the existing sensitive API list does not meet the security requirements of the application, you can click Add Sensitive API to search and select more APIs from the system API list to add to the sensitive API list.

If your application usesCustom API , you can also add the custom API as a sensitive API.

Fill in the custom API name and API function, and click Save.

TIP

Please refer to the Custom API Guide document to use the custom API function. Here, please fill in the 'api_name' field for the custom API name.

Sensitive API permission application and approval

Mini program applies to the application for sensitive API calling permissions

Mini program developers need to click 'Interface Permissions' in the left menu 'Mini Program Management > Development Management' in the mini program team to view the sensitive APIs set by the application currently bound to the mini program.

Click 'Apply for Activation', fill in the application information, and apply to the application for the sensitive API calling permission.

After the mini program developer applies for sensitive API call permissions, the application administrator and reviewer will receive approval information under 'Application Management-Sensitive API Management-Sensitive API Call Approval'.

Click Approve, and the approval information window will pop up. Click Approve to agree to the mini program to call the sensitive API. Click Reject to prevent the mini program from calling the sensitive API.

After approval, the approval record will be displayed under the 'Approved' column.

Configuration Management

When implementing the standard login function of the Mini Program in the App, you need to first configure the SecretKey required for authentication when logging into the Mini Program and the backend service domain name of the App in the configuration management.

TIP

The SecretKey is generated and managed by the App developer. The recommended format is a string of numbers + English letters with a length of 16, 24, or 32 bits.