App Check
Provider
App Check
Application attestation at protected request boundaries.
CanonicalImplemented locally
Why it exists
Identity and application attestation address different request concerns.
Example
A protected request carries application attestation in addition to user identity.
Connects to
- App Check attests application context at Request Boundary
Implementation notes
Attestation complements authentication and scoped authorization.
Public evidence: Cloudflare edge and Google Cloud application workloads have separate roles.
Related workflows
No curated journey in this edition.
Related decisions
See the system-wide decisions.
Technical details
Attestation complements authentication and scoped authorization.
Conceptual explanation; private implementation details are omitted.