Category
モバイルアプリ開発（Expo / React Native）の本番運用ガイド
モバイルアプリはWebと違い『配布した瞬間に相手の端末で動く』——バイナリもローカルストレージも攻撃者の支配下にある、という前提が設計を変えます。本クラスタは、Expo Router / CNG / EAS / OTA更新によるリリース基盤と、OWASP MASVS v2.1.0 に沿ったセキュリティ設計（機微データの保管、生体認証、通信の保護）を扱い、審査にも監査にも耐えるアプリの作り方を、公式ドキュメント準拠の実コードで示します。
5 articles in total
Foundational guide
Foundational guide (start here)
Expo Production Operation Guide 2026: Expo Router, CNG, EAS, and OTA Updates Explained in Real Code
A practical guide to fully using Expo SDK 56 (React Native 0.85 / React 19.2, New Architecture standard) in production. Explained with working code from a real monorepo: Expo Router v7's file-based routing, CNG (Continuous Native Generation) and config plugins, EAS Build/Update/Submit/Workflows, and the runtimeVersion design of OTA updates that prevents accidents.
Related practical articles
- セキュリティiOSAndroidPythonAWS
Server-Side App Attest and Play Integrity Verification in Python: Open Your Paid AI API Only to Genuine App Installs
Verify Apple App Attest and Google Play Integrity on your server in Python, from a shipped App Store app: attestation, assertions, counters, requestHash, AI cost caps, fail-open vs fail-closed, and tests.
31 min read - React NativeExpoiOSオフラインファーストデータベース
Building a Serverless, Offline-First iOS App with Expo: expo-sqlite Migrations, Encrypted Backups, and StoreKit 2 One-Time Purchases in Production Code
A design guide for an Expo (SDK 57) iOS app with no server and no login: expo-sqlite migrations via user_version, an encrypted backup format for moving to a new phone, StoreKit 2 one-time purchases without RevenueCat plus layered paywall gates, and a ports-and-adapters structure that runs under Jest without a simulator — all from an app live on the App Store.
26 min read - React NativeExpoSwiftiOSNative Modules
React Native / Expo × Swift Native Modules: Choosing Between the Expo Modules API and Turbo Native Modules, with Production Code
How to call Swift iOS APIs from React Native / Expo through a native module. When to use the Expo Modules API (SDK 57) versus Turbo Native Modules, and how to handle async/await, Records, error codes, events, SharedObjects, Jest tests and the privacy manifest — explained with the official docs and a real app's code.
33 min read - モバイルアプリReact NativeExpoセキュリティOWASP
Mobile App Security Implementation Guide 2026 | OWASP MASVS, SecureStore, Biometrics (React Native / Expo)
A security implementation guide for running React Native / Expo apps safely in production. Organized around the eight control groups of OWASP MASVS v2.1.0, covering secure token storage (expo-secure-store), the EXPO_PUBLIC_ pitfall, correct biometric configuration, and the reality of TLS and certificate pinning — with code verified against the official docs.
8 min read