Bump Demo
Two iPhones running the app discover one another, exchange Nearby Interaction
tokens, and turn green with a haptic response when they come within about 25 cm.
Each phone can connect Instagram, LinkedIn and X. When two phones meet, the
server compares every network both phones have connected:
| Network | Sign-in | Compared list |
|---|
| Instagram | Unipile Hosted Auth | accounts both people follow |
| LinkedIn | Unipile Hosted Auth | mutual connections |
| X | X OAuth 2.0 with PKCE (proves the account) | accounts both people follow, from twitterapi.io |
Run on two iPhones
- Use two iPhones that support UWB distance measurement. Keep both apps in the
foreground. The app checks capability at runtime and displays an error on
unsupported devices.
- Connect each phone to the Mac, unlock it, trust the computer, and enable
Developer Mode if prompted.
- Open
BumpDemo.xcodeproj. In Signing & Capabilities, select your Personal
Team or development team and turn on automatic signing. Change the bundle ID
if Xcode says it is taken.
- Select the first phone as the run destination and press Run. Repeat for the
second phone. Allow Local Network and Nearby Interaction permissions on both.
- Connect the same network on both phones, then bring the phones close. Both should
turn green and vibrate, followed by the common following list. Tap Try
again to repeat. If discovery stops, tap Restart pairing on both.
The phones may use different Apple Accounts. Xcode signs the app with the
developer team selected on each Mac and must provision its connected device.
You can build the same project on two Macs, one phone per Mac. The iPhone 18 Pro
running iOS 27 needs an Xcode installation with matching iOS 27 device support;
Xcode 26.6 on the first Mac reports a missing device image variant for it.
project.yml is the XcodeGen source. If the Xcode project needs regenerating,
run xcodegen generate from this directory.
The API lives in server/. It requires an application-scoped Unipile v2 API key
in UNIPILE_V2_API_KEY on the server for Instagram and LinkedIn.
X is enabled when the server also has X_CLIENT_ID and TWITTERAPI_IO_KEY
(plus X_CLIENT_SECRET for a confidential X app). In the X developer console,
enable OAuth 2.0 user authentication for the app and register
https://bump.40-160-146-47.sslip.io/v1/x/callback as the callback URL. The
server requests only users.read tweet.read, uses the token once to read the
signed-in username, and does not store it.
Instagram sign-in in Unipile's web page can fail with "Captcha verification
failed". Use the page's UniLogin option from a desktop Chrome profile that is
signed in to Instagram; the phone picks up the account when the app returns to
the foreground. Its signing and data stay on the server;
the iOS app keeps only its own anonymous device token in Keychain. The server
stores complete following lists for one hour and honors Unipile rate limits.
For the VPS deployment, server/deploy/ contains Docker Compose and Caddy
configuration. The running application copy is at ~/.local/share/bump-demo/app, its
database at ~/.local/share/bump-demo/data/bump.db, and its private environment
file at ~/.config/bump-demo/server.env.
