I'm curious to know how facebook has implemented authentication on mobile app.
The app is installed on the mobile device, then (the first time), it ask you email and password and store them. Where? In a file? Or in a sqlite db? And how facebook protect them?
The next time, the app doesn't prompt the login, so i think that user and password are sent automatically by the app. Also I read that, after the login, the facebook's api generate a token used during the request/responses between mobile and server.