We are trying to integrate "Device Check" and "Device Check - App attest" services to check device integrity and app integrity. We read apple documentation and could not locate the TTL(time-to live) for "Device Token" and "App Attestation Object". Could you let us what TTL for Device Token" and "App Attestation Object"? We can design our architecture based on your answer
The certificates contained in the DeviceCheck token are going to be valid for at least 24 hours. The exact TTL is not documented. The expectation is to be able to easily generate new DeviceCheck Tokens so you always have a fresh one. There is little value to re-use these tokens.
The certificates contained in the App Attestation receipts, however, will expire after 24 hours. So, you would need to plan to use them within that time.
Argun Tekant / DTS Engineer / Core Technologies