blocks|key|1978771|text|我刚想通了。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1978772|基本上，它的工作方式是，当购买成功时，android市场会返回一条消息(格式为JSON)，其中包含订单详细信息和加密签名。在Security.java类中，verify函数通过使用您的公钥验证签名来确保消息确实来自Android+market应用程序。|1978773|如果您想在组合中使用您自己的服务器，您只需将签名和json有效负载传递到您的服务器，并验证服务器上的json有效负载。如果可以验证json数据来自市场应用程序，就可以使用它来创建服务器端order对象。然后，您可以响应客户端应用程序，告知订单已处理并更新您的UI。|1978774|我在我的应用程序中所做的只是在Security类的verify函数中添加服务器通信内容，而不是现有的verify函数。|1978775|真正的诀窍是用ruby编写签名验证代码。以下是有效的方法：|1978776|base64_encoded_public_key是您用户配置文件中的密钥，sig是传递给地下城安全示例的signature属性，data是由市场发回的json字符串。|1978777|require+'rubygems'
require+'openssl'
require+'base64'

base64_encoded_public_key+=+"YOUR+KEY+HERE"
data+=+"JSON_DATA_HERE"
sig+=+"SIGNATURE+HERE"

key+=+OpenSSL::PKey::RSA.new(Base64.decode64(base64_encoded_public_key))

verified+=+key.verify(+OpenSSL::Digest::SHA1.new,+Base64.decode64(sig),+data+)|code-block|syntax|javascript|1978778|entityMap^0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|T|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|U|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|V|8|@]|9|@]|A|$]]|$1|H|3|I|5|6|7|W|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|X|8|@]|9|@]|A|$]]|$1|L|3|M|5|N|7|Y|8|@]|9|@]|A|$O|P]]|$1|Q|3|-4|5|6|7|Z|8|@]|9|@]|A|$]]]|R|$]]

I just figured this out.

Basically the way it works is that when a purchase succeeds the android market sends back a message (formatted in JSON) with the order details and a cryptographic signature. In the Security.java class the verify function is making sure that the message really did come from the Android market application by verifying the signature using your public key.

If you want to use your own server in the mix, you simply need to pass the signature and json payload to your server and verify the json payload on your server. If you can verify that the json data came from the market application, you can use it to create your server side order objects. Then you can respond to your client application that the order was processed and update your UI.

What I did in my app is just add in the server communication stuff in the Security class' verify function in place of the existing verify function.

The real trick is writing signature verification code in ruby. Here's what works:

base64_encoded_public_key is your key in your user profile
sig is the signature property being passed into the Dungeons security example
data is the json string sent back by the market.

<pre><code>require 'rubygems'
require 'openssl'
require 'base64'

base64_encoded_public_key = "YOUR KEY HERE"
data = "JSON_DATA_HERE"
sig = "SIGNATURE HERE"

key = OpenSSL::PKey::RSA.new(Base64.decode64(base64_encoded_public_key))

verified = key.verify( OpenSSL::Digest::SHA1.new, Base64.decode64(sig), data )
</code></pre>

blocks|key|1978780|text|只有在对签名进行双重Base64解码后，这才能对我起作用。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1978781|++public_key+=+Base64.decode64(public_key_b64)
++signature+=+Base64.decode64(Base64.decode64(signature_b64))
++signed_data+=+Base64.decode64(signed_data_b64)

++key+=+OpenSSL::PKey::RSA.new(public_key)
++verified+=+key.verify(OpenSSL::Digest::SHA1.new,+signature,+signed_data)|code-block|syntax|javascript|1978782|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

This worked for me only after double Base64 decoding of signature.

<pre><code> public_key = Base64.decode64(public_key_b64)
 signature = Base64.decode64(Base64.decode64(signature_b64))
 signed_data = Base64.decode64(signed_data_b64)

 key = OpenSSL::PKey::RSA.new(public_key)
 verified = key.verify(OpenSSL::Digest::SHA1.new, signature, signed_data)
</code></pre>

I am having trouble figuring out how to verify Androind In-app Billing purchases with my Ruby on Rails server.

<a href="http://developer.android.com/guide/market/billing/billing_integrate.html" rel="noreferrer">http://developer.android.com/guide/market/billing/billing_integrate.html</a>

I think that Android gives a Security.java that has some sort of method to verify on physical device. From my research it seems like either (1) I need to figure out how to use this Security.java class with my Ruby on Rails server or (2) I need to port Security.java to Ruby.

Is this correct? Does anyone know another way to verify the receipt?

How do I verify Android In-app Billing with a server with Ruby?

服务器

Android

JSON

我很难弄清楚如何用我的Ruby on Rails服务器来验证Androind的应用内付费购买。我认为Android提供了一个可以在物理设备上进行验证的Security.java。根据我的研究，似乎要么(1)我需要弄清楚如何在我的Ruby on Rails服务器上使用这个Security.java类，要么(2)我需要将S...

问如何在安装了Ruby的服务器上验证Android应用内计费？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在安装了Ruby的服务器上验证Android应用内计费？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在安装了Ruby的服务器上验证Android应用内计费？
EN