Ali Ok Wojciech Trocki I added some details to the description of AEROGEAR-2044. It would be option 2) above, which is based on Craigs suggestion.
If you want to create a separate task to capture it, that's OK.
The app sends the app id and the api key in headers, so they can be cross checked against the mobile app instance (crd instance)