blocks|key|2770520|text|下面是我如何在我的应用内购买库RMStore中解决这个问题的演练。我将解释如何验证交易，包括验证整个收据。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2770521|一目了然|2770522|获取收据并验证交易。如果失败，请刷新收据，然后重试。这使得验证过程是异步的，因为刷新收据是异步的。|2770523|来自RMStoreAppReceiptVerifier|2770524|RMAppReceipt+*receipt+=+[RMAppReceipt+bundleReceipt];
const+BOOL+verified+=+[self+verifyTransaction:transaction+inReceipt:receipt+success:successBlock+failure:nil];+//+failureBlock+is+nil+intentionally.+See+below.
if+(verified)+return;

//+Apple+recommends+to+refresh+the+receipt+if+validation+fails+on+iOS
[[RMStore+defaultStore]+refreshReceiptOnSuccess:%5E{
++++RMAppReceipt+*receipt+=+[RMAppReceipt+bundleReceipt];
++++[self+verifyTransaction:transaction+inReceipt:receipt+success:successBlock+failure:failureBlock];
}+failure:%5E(NSError+*error)+{
++++[self+failWithBlock:failureBlock+error:error];
}];|code-block|syntax|javascript|2770525|获取回单数据|2770526|收据是[[NSBundle+mainBundle]+appStoreReceiptURL]格式的，实际上是一个PCKS7容器。我的密码学很差，所以我用OpenSSL打开了这个容器。其他人显然是纯粹用system+frameworks做的。|style|CODE|2770527|将OpenSSL添加到项目中并不是一件容易的事情。RMStore+wiki应该会有所帮助。|2770528|如果选择使用OpenSSL打开PKCS7容器，代码可能如下所示。来自RMAppReceipt：|2770529|%2B+(NSData*)dataFromPKCS7Path:(NSString*)path
{
++++const+char+*cpath+=+[[path+stringByStandardizingPath]+fileSystemRepresentation];
++++FILE+*fp+=+fopen(cpath,+"rb");
++++if+(!fp)+return+nil;

++++PKCS7+*p7+=+d2i_PKCS7_fp(fp,+NULL);
++++fclose(fp);

++++if+(!p7)+return+nil;

++++NSData+*data;
++++NSURL+*certificateURL+=+[[NSBundle+mainBundle]+URLForResource:@"AppleIncRootCertificate"+withExtension:@"cer"];
++++NSData+*certificateData+=+[NSData+dataWithContentsOfURL:certificateURL];
++++if+([self+verifyPKCS7:p7+withCertificateData:certificateData])
++++{
++++++++struct+pkcs7_st+*contents+=+p7->d.sign->contents;
++++++++if+(PKCS7_type_is_data(contents))
++++++++{
++++++++++++ASN1_OCTET_STRING+*octets+=+contents->d.data;
++++++++++++data+=+[NSData+dataWithBytes:octets->data+length:octets->length];
++++++++}
++++}
++++PKCS7_free(p7);
++++return+data;
}|2770530|我们将在稍后讨论验证的细节。|2770531|获取收据字段|2770532|收据以ASN1格式表示。它包含一般信息、一些用于验证目的的字段(我们将在稍后讨论)以及每个应用程序内购买的特定信息。|2770533|再一次，当涉及到阅读ASN1时，OpenSSL提供了帮助。在RMAppReceipt中，使用一些帮助器方法：|2770534|NSMutableArray+*purchases+=+[NSMutableArray+array];
[RMAppReceipt+enumerateASN1Attributes:asn1Data.bytes+length:asn1Data.length+usingBlock:%5E(NSData+*data,+int+type)+{
++++const+uint8_t+*s+=+data.bytes;
++++const+NSUInteger+length+=+data.length;
++++switch+(type)
++++{
++++++++case+RMAppReceiptASN1TypeBundleIdentifier:
++++++++++++_bundleIdentifierData+=+data;
++++++++++++_bundleIdentifier+=+RMASN1ReadUTF8String(&s,+length);
++++++++++++break;
++++++++case+RMAppReceiptASN1TypeAppVersion:
++++++++++++_appVersion+=+RMASN1ReadUTF8String(&s,+length);
++++++++++++break;
++++++++case+RMAppReceiptASN1TypeOpaqueValue:
++++++++++++_opaqueValue+=+data;
++++++++++++break;
++++++++case+RMAppReceiptASN1TypeHash:
++++++++++++_hash+=+data;
++++++++++++break;
++++++++case+RMAppReceiptASN1TypeInAppPurchaseReceipt:
++++++++{
++++++++++++RMAppReceiptIAP+*purchase+=+[[RMAppReceiptIAP+alloc]+initWithASN1Data:data];
++++++++++++[purchases+addObject:purchase];
++++++++++++break;
++++++++}
++++++++case+RMAppReceiptASN1TypeOriginalAppVersion:
++++++++++++_originalAppVersion+=+RMASN1ReadUTF8String(&s,+length);
++++++++++++break;
++++++++case+RMAppReceiptASN1TypeExpirationDate:
++++++++{
++++++++++++NSString+*string+=+RMASN1ReadIA5SString(&s,+length);
++++++++++++_expirationDate+=+[RMAppReceipt+formatRFC3339String:string];
++++++++++++break;
++++++++}
++++}
}];
_inAppPurchases+=+purchases;|2770535|获取应用内购买|2770536|每一次应用内购买也都是ASN1格式的。解析它与解析一般的收据信息非常相似。|2770537|在RMAppReceipt中，使用相同的辅助方法：|2770538|[RMAppReceipt+enumerateASN1Attributes:asn1Data.bytes+length:asn1Data.length+usingBlock:%5E(NSData+*data,+int+type)+{
++++const+uint8_t+*p+=+data.bytes;
++++const+NSUInteger+length+=+data.length;
++++switch+(type)
++++{
++++++++case+RMAppReceiptASN1TypeQuantity:
++++++++++++_quantity+=+RMASN1ReadInteger(&p,+length);
++++++++++++break;
++++++++case+RMAppReceiptASN1TypeProductIdentifier:
++++++++++++_productIdentifier+=+RMASN1ReadUTF8String(&p,+length);
++++++++++++break;
++++++++case+RMAppReceiptASN1TypeTransactionIdentifier:
++++++++++++_transactionIdentifier+=+RMASN1ReadUTF8String(&p,+length);
++++++++++++break;
++++++++case+RMAppReceiptASN1TypePurchaseDate:
++++++++{
++++++++++++NSString+*string+=+RMASN1ReadIA5SString(&p,+length);
++++++++++++_purchaseDate+=+[RMAppReceipt+formatRFC3339String:string];
++++++++++++break;
++++++++}
++++++++case+RMAppReceiptASN1TypeOriginalTransactionIdentifier:
++++++++++++_originalTransactionIdentifier+=+RMASN1ReadUTF8String(&p,+length);
++++++++++++break;
++++++++case+RMAppReceiptASN1TypeOriginalPurchaseDate:
++++++++{
++++++++++++NSString+*string+=+RMASN1ReadIA5SString(&p,+length);
++++++++++++_originalPurchaseDate+=+[RMAppReceipt+formatRFC3339String:string];
++++++++++++break;
++++++++}
++++++++case+RMAppReceiptASN1TypeSubscriptionExpirationDate:
++++++++{
++++++++++++NSString+*string+=+RMASN1ReadIA5SString(&p,+length);
++++++++++++_subscriptionExpirationDate+=+[RMAppReceipt+formatRFC3339String:string];
++++++++++++break;
++++++++}
++++++++case+RMAppReceiptASN1TypeWebOrderLineItemID:
++++++++++++_webOrderLineItemID+=+RMASN1ReadInteger(&p,+length);
++++++++++++break;
++++++++case+RMAppReceiptASN1TypeCancellationDate:
++++++++{
++++++++++++NSString+*string+=+RMASN1ReadIA5SString(&p,+length);
++++++++++++_cancellationDate+=+[RMAppReceipt+formatRFC3339String:string];
++++++++++++break;
++++++++}
++++}
}];+|2770539|应该注意的是，某些应用内购买，例如消耗品和不可续订，只会在收据中出现一次。您应该在购买后立即验证这些内容(同样，RMStore会帮助您完成此操作)。|2770540|验证一目了然|2770541|现在我们得到了收据中的所有字段和它的所有应用内购买。首先我们验证收据本身，然后简单地检查收据是否包含交易的产品。|2770542|下面是我们在开始回调的方法。来自RMStoreAppReceiptVerificator|2770543|-+(BOOL)verifyTransaction:(SKPaymentTransaction*)transaction
++++++++++++++++inReceipt:(RMAppReceipt*)receipt
+++++++++++++++++++++++++++success:(void+(%5E)())successBlock
+++++++++++++++++++++++++++failure:(void+(%5E)(NSError+*error))failureBlock
{
++++const+BOOL+receiptVerified+=+[self+verifyAppReceipt:receipt];
++++if+(!receiptVerified)
++++{
++++++++[self+failWithBlock:failureBlock+message:NSLocalizedString(@"The+app+receipt+failed+verification",+@"")];
++++++++return+NO;
++++}
++++SKPayment+*payment+=+transaction.payment;
++++const+BOOL+transactionVerified+=+[receipt+containsInAppPurchaseOfProductIdentifier:payment.productIdentifier];
++++if+(!transactionVerified)
++++{
++++++++[self+failWithBlock:failureBlock+message:NSLocalizedString(@"The+app+receipt+doest+not+contain+the+given+product",+@"")];
++++++++return+NO;
++++}
++++if+(successBlock)
++++{
++++++++successBlock();
++++}
++++return+YES;
}|2770544|验证回执|2770545|验证收据本身归结为：|2770546|2770547|检查收据是否有效PKCS7和ASN1。我们已经隐含地already.|ordered-list-item|2770548|Verifying了收据是由苹果公司签署的。这是在解析收据之前完成的，将详细说明收据中包含的捆绑标识符与您的捆绑标识符相对应的below.|2770549|Checking。你应该硬编码你的捆绑包标识符，因为修改你的应用捆绑包并使用收据中包含的应用版本对应于你的应用版本标识符的其他receipt.|2770550|Checking似乎并不是很难。由于上述相同的原因，您应该对应用程序版本进行硬编码。|2770551|检查收据哈希以确保收据与当前设备相对应。|2770552|2770553|来自RMStoreAppReceiptVerificator的高级代码中的5个步骤：|2770554|-+(BOOL)verifyAppReceipt:(RMAppReceipt*)receipt
{
++++//+Steps+1+&+2+were+done+while+parsing+the+receipt
++++if+(!receipt)+return+NO;+++

++++//+Step+3
++++if+(![receipt.bundleIdentifier+isEqualToString:self.bundleIdentifier])+return+NO;

++++//+Step+4++++++++
++++if+(![receipt.appVersion+isEqualToString:self.bundleVersion])+return+NO;

++++//+Step+5++++++++
++++if+(![receipt+verifyReceiptHash])+return+NO;

++++return+YES;
}|2770555|让我们深入到步骤2和5。|2770556|验证回执签名|2770557|当我们提取数据时，我们浏览了一下收据签名验证。收据上有苹果公司的根证书签名，该证书可以从Apple+Root+Certificate+Authority下载。下面的代码将PKCS7容器和根证书作为数据，并检查它们是否匹配：|2770558|%2B+(BOOL)verifyPKCS7:(PKCS7*)container+withCertificateData:(NSData*)certificateData
{+//+Based+on:+https://developer.apple.com/library/content/releasenotes/General/ValidateAppStoreReceipt/Chapters/ValidateLocally.html#//apple_ref/doc/uid/TP40010573-CH1-SW17
++++static+int+verified+=+1;
++++int+result+=+0;
++++OpenSSL_add_all_digests();+//+Required+for+PKCS7_verify+to+work
++++X509_STORE+*store+=+X509_STORE_new();
++++if+(store)
++++{
++++++++const+uint8_t+*certificateBytes+=+(uint8_t+*)(certificateData.bytes);
++++++++X509+*certificate+=+d2i_X509(NULL,+&certificateBytes,+(long)certificateData.length);
++++++++if+(certificate)
++++++++{
++++++++++++X509_STORE_add_cert(store,+certificate);

++++++++++++BIO+*payload+=+BIO_new(BIO_s_mem());
++++++++++++result+=+PKCS7_verify(container,+NULL,+store,+NULL,+payload,+0);
++++++++++++BIO_free(payload);

++++++++++++X509_free(certificate);
++++++++}
++++}
++++X509_STORE_free(store);
++++EVP_cleanup();+//+Balances+OpenSSL_add_all_digests+(),+per+http://www.openssl.org/docs/crypto/OpenSSL_add_all_algorithms.html

++++return+result+==+verified;
}|2770559|这在回执解析之前的一开始就已经完成了。|2770560|验证接收哈希|2770561|包括在收据中的散列是设备id、包括在收据中的某个不透明值和捆绑id的SHA1。|2770562|这就是在iOS上验证接收散列的方法。来自RMAppReceipt|2770563|-+(BOOL)verifyReceiptHash
{
++++//+TODO:+Getting+the+uuid+in+Mac+is+different.+See:+https://developer.apple.com/library/content/releasenotes/General/ValidateAppStoreReceipt/Chapters/ValidateLocally.html#//apple_ref/doc/uid/TP40010573-CH1-SW5
++++NSUUID+*uuid+=+[[UIDevice+currentDevice]+identifierForVendor];
++++unsigned+char+uuidBytes[16];
++++[uuid+getUUIDBytes:uuidBytes];

++++//+Order+taken+from:+https://developer.apple.com/library/content/releasenotes/General/ValidateAppStoreReceipt/Chapters/ValidateLocally.html#//apple_ref/doc/uid/TP40010573-CH1-SW5
++++NSMutableData+*data+=+[NSMutableData+data];
++++[data+appendBytes:uuidBytes+length:sizeof(uuidBytes)];
++++[data+appendData:self.opaqueValue];
++++[data+appendData:self.bundleIdentifierData];

++++NSMutableData+*expectedHash+=+[NSMutableData+dataWithLength:SHA_DIGEST_LENGTH];
++++SHA1(data.bytes,+data.length,+expectedHash.mutableBytes);

++++return+[expectedHash+isEqualToData:self.hash];
}|2770564|这就是它的要点。我可能在这里或那里遗漏了一些东西，所以我可能会稍后再回来看看这篇文章。在任何情况下，我都建议您浏览完整的代码以了解更多细节。|2770565|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/robotmedia/RMStore|1|https://github.com/robotmedia/RMStore/blob/master/RMStore/Optional/RMStoreAppReceiptVerifier.m|2|https://gist.github.com/sazameki/3026845|3|https://github.com/robotmedia/RMStore/wiki/Receipt-verification#adding-openssl|4|https://github.com/robotmedia/RMStore/blob/master/RMStore/Optional/RMAppReceipt.m|5|6|7|https://github.com/robotmedia/RMStore/blob/master/RMStore/Optional/RMStoreAppReceiptVerificator.m]|8|9|http://www.apple.com/certificateauthority/|10^0|F|7|0|0|0|0|2|P|1|0|0|0|3|16|2R|H|2|0|P|C|3|0|Y|C|4|0|0|0|0|0|U|C|5|0|0|0|0|1|C|6|0|0|0|0|0|G|S|7|0|0|0|0|0|0|0|0|0|0|0|2|S|8|0|0|0|0|18|W|9|0|0|0|0|0|K|C|A|0|0|0^^$0|@$1|2|3|4|5|6|7|3L|8|@]|9|@$A|3M|B|3N|1|3O]]|C|$]]|$1|D|3|E|5|6|7|3P|8|@]|9|@]|C|$]]|$1|F|3|G|5|6|7|3Q|8|@]|9|@]|C|$]]|$1|H|3|I|5|6|7|3R|8|@]|9|@$A|3S|B|3T|1|3U]]|C|$]]|$1|J|3|K|5|L|7|3V|8|@]|9|@]|C|$M|N]]|$1|O|3|P|5|6|7|3W|8|@]|9|@]|C|$]]|$1|Q|3|R|5|6|7|3X|8|@$A|3Y|B|3Z|S|T]]|9|@$A|40|B|41|1|42]]|C|$]]|$1|U|3|V|5|6|7|43|8|@]|9|@$A|44|B|45|1|46]]|C|$]]|$1|W|3|X|5|6|7|47|8|@]|9|@$A|48|B|49|1|4A]]|C|$]]|$1|Y|3|Z|5|L|7|4B|8|@]|9|@]|C|$M|N]]|$1|10|3|11|5|6|7|4C|8|@]|9|@]|C|$]]|$1|12|3|13|5|6|7|4D|8|@]|9|@]|C|$]]|$1|14|3|15|5|6|7|4E|8|@]|9|@]|C|$]]|$1|16|3|17|5|6|7|4F|8|@]|9|@$A|4G|B|4H|1|4I]]|C|$]]|$1|18|3|19|5|L|7|4J|8|@]|9|@]|C|$M|N]]|$1|1A|3|1B|5|6|7|4K|8|@]|9|@]|C|$]]|$1|1C|3|1D|5|6|7|4L|8|@]|9|@]|C|$]]|$1|1E|3|1F|5|6|7|4M|8|@]|9|@$A|4N|B|4O|1|4P]]|C|$]]|$1|1G|3|1H|5|L|7|4Q|8|@]|9|@]|C|$M|N]]|$1|1I|3|1J|5|6|7|4R|8|@]|9|@]|C|$]]|$1|1K|3|1L|5|6|7|4S|8|@]|9|@]|C|$]]|$1|1M|3|1N|5|6|7|4T|8|@]|9|@]|C|$]]|$1|1O|3|1P|5|6|7|4U|8|@]|9|@$A|4V|B|4W|1|4X]]|C|$]]|$1|1Q|3|1R|5|L|7|4Y|8|@]|9|@]|C|$M|N]]|$1|1S|3|1T|5|6|7|4Z|8|@]|9|@]|C|$]]|$1|1U|3|1V|5|6|7|50|8|@]|9|@]|C|$]]|$1|1W|3|-4|5|6|7|51|8|@]|9|@]|C|$]]|$1|1X|3|1Y|5|1Z|7|52|8|@]|9|@]|C|$]]|$1|20|3|21|5|1Z|7|53|8|@]|9|@]|C|$]]|$1|22|3|23|5|1Z|7|54|8|@]|9|@]|C|$]]|$1|24|3|25|5|1Z|7|55|8|@]|9|@]|C|$]]|$1|26|3|27|5|1Z|7|56|8|@]|9|@]|C|$]]|$1|28|3|-4|5|6|7|57|8|@]|9|@]|C|$]]|$1|29|3|2A|5|6|7|58|8|@]|9|@$A|59|B|5A|1|5B]]|C|$]]|$1|2B|3|2C|5|L|7|5C|8|@]|9|@]|C|$M|N]]|$1|2D|3|2E|5|6|7|5D|8|@]|9|@]|C|$]]|$1|2F|3|2G|5|6|7|5E|8|@]|9|@]|C|$]]|$1|2H|3|2I|5|6|7|5F|8|@]|9|@$A|5G|B|5H|1|5I]]|C|$]]|$1|2J|3|2K|5|L|7|5J|8|@]|9|@]|C|$M|N]]|$1|2L|3|2M|5|6|7|5K|8|@]|9|@]|C|$]]|$1|2N|3|2O|5|6|7|5L|8|@]|9|@]|C|$]]|$1|2P|3|2Q|5|6|7|5M|8|@]|9|@]|C|$]]|$1|2R|3|2S|5|6|7|5N|8|@]|9|@$A|5O|B|5P|1|5Q]]|C|$]]|$1|2T|3|2U|5|L|7|5R|8|@]|9|@]|C|$M|N]]|$1|2V|3|2W|5|6|7|5S|8|@]|9|@]|C|$]]|$1|2X|3|-4|5|6|7|5T|8|@]|9|@]|C|$]]]|2Y|$2Z|$5|30|31|32|C|$33|34]]|35|$5|30|31|32|C|$33|36]]|37|$5|30|31|32|C|$33|38]]|39|$5|30|31|32|C|$33|3A]]|3B|$5|30|31|32|C|$33|3C]]|3D|$5|30|31|32|C|$33|3C]]|3E|$5|30|31|32|C|$33|3C]]|3F|$5|30|31|32|C|$33|3G]]|3H|$5|30|31|32|C|$33|3G]]|3I|$5|30|31|32|C|$33|3J]]|3K|$5|30|31|32|C|$33|3C]]]]

Here's a walkthrough of how I solved this in my in-app purchase library <a href="https://github.com/robotmedia/RMStore" rel="noreferrer">RMStore</a>. I will explain how to verify a transaction, which includes verifying the whole receipt.

<h2>At a glance</h2>

Get the receipt and verify the transaction. If it fails, refresh the receipt and try again. This makes the verification process asynchronous as refreshing the receipt is asynchronous.

From <a href="https://github.com/robotmedia/RMStore/blob/master/RMStore/Optional/RMStoreAppReceiptVerifier.m" rel="noreferrer">RMStoreAppReceiptVerifier</a>:

<pre><code>RMAppReceipt *receipt = [RMAppReceipt bundleReceipt];
const BOOL verified = [self verifyTransaction:transaction inReceipt:receipt success:successBlock failure:nil]; // failureBlock is nil intentionally. See below.
if (verified) return;

// Apple recommends to refresh the receipt if validation fails on iOS
[[RMStore defaultStore] refreshReceiptOnSuccess:^{
 RMAppReceipt *receipt = [RMAppReceipt bundleReceipt];
 [self verifyTransaction:transaction inReceipt:receipt success:successBlock failure:failureBlock];
} failure:^(NSError *error) {
 [self failWithBlock:failureBlock error:error];
}];
</code></pre>

<h2>Getting the receipt data</h2>

The receipt is in <code>[[NSBundle mainBundle] appStoreReceiptURL]</code> and is actually a PCKS7 container. I suck at cryptography so I used OpenSSL to open this container. Others apparently have done it purely with <a href="https://gist.github.com/sazameki/3026845" rel="noreferrer">system frameworks</a>.

Adding OpenSSL to your project is not trivial. The <a href="https://github.com/robotmedia/RMStore/wiki/Receipt-verification#adding-openssl" rel="noreferrer">RMStore wiki</a> should help. 

If you opt to use OpenSSL to open the PKCS7 container, your code could look like this. From <a href="https://github.com/robotmedia/RMStore/blob/master/RMStore/Optional/RMAppReceipt.m" rel="noreferrer">RMAppReceipt</a>: 

<pre><code>+ (NSData*)dataFromPKCS7Path:(NSString*)path
{
 const char *cpath = [[path stringByStandardizingPath] fileSystemRepresentation];
 FILE *fp = fopen(cpath, "rb");
 if (!fp) return nil;

 PKCS7 *p7 = d2i_PKCS7_fp(fp, NULL);
 fclose(fp);

 if (!p7) return nil;

 NSData *data;
 NSURL *certificateURL = [[NSBundle mainBundle] URLForResource:@"AppleIncRootCertificate" withExtension:@"cer"];
 NSData *certificateData = [NSData dataWithContentsOfURL:certificateURL];
 if ([self verifyPKCS7:p7 withCertificateData:certificateData])
 {
 struct pkcs7_st *contents = p7-&gt;d.sign-&gt;contents;
 if (PKCS7_type_is_data(contents))
 {
 ASN1_OCTET_STRING *octets = contents-&gt;d.data;
 data = [NSData dataWithBytes:octets-&gt;data length:octets-&gt;length];
 }
 }
 PKCS7_free(p7);
 return data;
}
</code></pre>

We'll get into the details of the verification later.

<h2>Getting the receipt fields</h2>

The receipt is expressed in ASN1 format. It contains general information, some fields for verification purposes (we'll come to that later) and specific information of each applicable in-app purchase. 

Again, OpenSSL comes to the rescue when it comes to reading ASN1. From <a href="https://github.com/robotmedia/RMStore/blob/master/RMStore/Optional/RMAppReceipt.m" rel="noreferrer">RMAppReceipt</a>, using a few helper methods: 

<pre><code>NSMutableArray *purchases = [NSMutableArray array];
[RMAppReceipt enumerateASN1Attributes:asn1Data.bytes length:asn1Data.length usingBlock:^(NSData *data, int type) {
 const uint8_t *s = data.bytes;
 const NSUInteger length = data.length;
 switch (type)
 {
 case RMAppReceiptASN1TypeBundleIdentifier:
 _bundleIdentifierData = data;
 _bundleIdentifier = RMASN1ReadUTF8String(&amp;s, length);
 break;
 case RMAppReceiptASN1TypeAppVersion:
 _appVersion = RMASN1ReadUTF8String(&amp;s, length);
 break;
 case RMAppReceiptASN1TypeOpaqueValue:
 _opaqueValue = data;
 break;
 case RMAppReceiptASN1TypeHash:
 _hash = data;
 break;
 case RMAppReceiptASN1TypeInAppPurchaseReceipt:
 {
 RMAppReceiptIAP *purchase = [[RMAppReceiptIAP alloc] initWithASN1Data:data];
 [purchases addObject:purchase];
 break;
 }
 case RMAppReceiptASN1TypeOriginalAppVersion:
 _originalAppVersion = RMASN1ReadUTF8String(&amp;s, length);
 break;
 case RMAppReceiptASN1TypeExpirationDate:
 {
 NSString *string = RMASN1ReadIA5SString(&amp;s, length);
 _expirationDate = [RMAppReceipt formatRFC3339String:string];
 break;
 }
 }
}];
_inAppPurchases = purchases;
</code></pre>

<h2>Getting the in-app purchases</h2>

Each in-app purchase is also in ASN1. Parsing it is very similar than parsing the general receipt information.

From <a href="https://github.com/robotmedia/RMStore/blob/master/RMStore/Optional/RMAppReceipt.m" rel="noreferrer">RMAppReceipt</a>, using the same helper methods:

<pre><code>[RMAppReceipt enumerateASN1Attributes:asn1Data.bytes length:asn1Data.length usingBlock:^(NSData *data, int type) {
 const uint8_t *p = data.bytes;
 const NSUInteger length = data.length;
 switch (type)
 {
 case RMAppReceiptASN1TypeQuantity:
 _quantity = RMASN1ReadInteger(&amp;p, length);
 break;
 case RMAppReceiptASN1TypeProductIdentifier:
 _productIdentifier = RMASN1ReadUTF8String(&amp;p, length);
 break;
 case RMAppReceiptASN1TypeTransactionIdentifier:
 _transactionIdentifier = RMASN1ReadUTF8String(&amp;p, length);
 break;
 case RMAppReceiptASN1TypePurchaseDate:
 {
 NSString *string = RMASN1ReadIA5SString(&amp;p, length);
 _purchaseDate = [RMAppReceipt formatRFC3339String:string];
 break;
 }
 case RMAppReceiptASN1TypeOriginalTransactionIdentifier:
 _originalTransactionIdentifier = RMASN1ReadUTF8String(&amp;p, length);
 break;
 case RMAppReceiptASN1TypeOriginalPurchaseDate:
 {
 NSString *string = RMASN1ReadIA5SString(&amp;p, length);
 _originalPurchaseDate = [RMAppReceipt formatRFC3339String:string];
 break;
 }
 case RMAppReceiptASN1TypeSubscriptionExpirationDate:
 {
 NSString *string = RMASN1ReadIA5SString(&amp;p, length);
 _subscriptionExpirationDate = [RMAppReceipt formatRFC3339String:string];
 break;
 }
 case RMAppReceiptASN1TypeWebOrderLineItemID:
 _webOrderLineItemID = RMASN1ReadInteger(&amp;p, length);
 break;
 case RMAppReceiptASN1TypeCancellationDate:
 {
 NSString *string = RMASN1ReadIA5SString(&amp;p, length);
 _cancellationDate = [RMAppReceipt formatRFC3339String:string];
 break;
 }
 }
}]; 
</code></pre>

It should be noted that certain in-app purchases, such as consumables and non-renewable subscriptions, will appear only once in the receipt. You should verify these right after the purchase (again, RMStore helps you with this).

<h2>Verification at a glance</h2>

Now we got all the fields from the receipt and all its in-app purchases. First we verify the receipt itself, and then we simply check if the receipt contains the product of the transaction.

Below is the method that we called back at the beginning. From <a href="https://github.com/robotmedia/RMStore/blob/master/RMStore/Optional/RMStoreAppReceiptVerificator.m]" rel="noreferrer">RMStoreAppReceiptVerificator</a>:

<pre><code>- (BOOL)verifyTransaction:(SKPaymentTransaction*)transaction
 inReceipt:(RMAppReceipt*)receipt
 success:(void (^)())successBlock
 failure:(void (^)(NSError *error))failureBlock
{
 const BOOL receiptVerified = [self verifyAppReceipt:receipt];
 if (!receiptVerified)
 {
 [self failWithBlock:failureBlock message:NSLocalizedString(@"The app receipt failed verification", @"")];
 return NO;
 }
 SKPayment *payment = transaction.payment;
 const BOOL transactionVerified = [receipt containsInAppPurchaseOfProductIdentifier:payment.productIdentifier];
 if (!transactionVerified)
 {
 [self failWithBlock:failureBlock message:NSLocalizedString(@"The app receipt doest not contain the given product", @"")];
 return NO;
 }
 if (successBlock)
 {
 successBlock();
 }
 return YES;
}
</code></pre>

<h2>Verifying the receipt</h2>

Verifying the receipt itself boils down to:

<ol>
<li>Checking that the receipt is valid PKCS7 and ASN1. We have done this implicitly already.</li>
<li>Verifying that the receipt is signed by Apple. This was done before parsing the receipt and will be detailed below.</li>
<li>Checking that the bundle identifier included in the receipt corresponds to your bundle identifier. You should hardcode your bundle identifier, as it doesn't seem to be very difficult to modify your app bundle and use some other receipt.</li>
<li>Checking that the app version included in the receipt corresponds to your app version identifier. You should hardcode the app version, for the same reasons indicated above.</li>
<li>Check the receipt hash to make sure the receipt correspond to the current device.</li>
</ol>

The 5 steps in code at a high-level, from <a href="https://github.com/robotmedia/RMStore/blob/master/RMStore/Optional/RMStoreAppReceiptVerificator.m]" rel="noreferrer">RMStoreAppReceiptVerificator</a>: 

<pre><code>- (BOOL)verifyAppReceipt:(RMAppReceipt*)receipt
{
 // Steps 1 &amp; 2 were done while parsing the receipt
 if (!receipt) return NO; 

 // Step 3
 if (![receipt.bundleIdentifier isEqualToString:self.bundleIdentifier]) return NO;

 // Step 4 
 if (![receipt.appVersion isEqualToString:self.bundleVersion]) return NO;

 // Step 5 
 if (![receipt verifyReceiptHash]) return NO;

 return YES;
}
</code></pre>

Let's drill-down into steps 2 and 5.

<h2>Verifying the receipt signature</h2>

Back when we extracted the data we glanced over the receipt signature verification. The receipt is signed with the Apple Inc. Root Certificate, which can be downloaded from <a href="http://www.apple.com/certificateauthority/" rel="noreferrer">Apple Root Certificate Authority</a>. The following code takes the PKCS7 container and the root certificate as data and checks if they match:

<pre><code>+ (BOOL)verifyPKCS7:(PKCS7*)container withCertificateData:(NSData*)certificateData
{ // Based on: https://developer.apple.com/library/content/releasenotes/General/ValidateAppStoreReceipt/Chapters/ValidateLocally.html#//apple_ref/doc/uid/TP40010573-CH1-SW17
 static int verified = 1;
 int result = 0;
 OpenSSL_add_all_digests(); // Required for PKCS7_verify to work
 X509_STORE *store = X509_STORE_new();
 if (store)
 {
 const uint8_t *certificateBytes = (uint8_t *)(certificateData.bytes);
 X509 *certificate = d2i_X509(NULL, &amp;certificateBytes, (long)certificateData.length);
 if (certificate)
 {
 X509_STORE_add_cert(store, certificate);

 BIO *payload = BIO_new(BIO_s_mem());
 result = PKCS7_verify(container, NULL, store, NULL, payload, 0);
 BIO_free(payload);

 X509_free(certificate);
 }
 }
 X509_STORE_free(store);
 EVP_cleanup(); // Balances OpenSSL_add_all_digests (), per http://www.openssl.org/docs/crypto/OpenSSL_add_all_algorithms.html

 return result == verified;
}
</code></pre>

This was done back at the beginning, before the receipt was parsed.

<h2>Verifying the receipt hash</h2>

The hash included in the receipt is a SHA1 of the device id, some opaque value included in the receipt and the bundle id.

This is how you would verify the receipt hash on iOS. From <a href="https://github.com/robotmedia/RMStore/blob/master/RMStore/Optional/RMAppReceipt.m" rel="noreferrer">RMAppReceipt</a>:

<pre><code>- (BOOL)verifyReceiptHash
{
 // TODO: Getting the uuid in Mac is different. See: https://developer.apple.com/library/content/releasenotes/General/ValidateAppStoreReceipt/Chapters/ValidateLocally.html#//apple_ref/doc/uid/TP40010573-CH1-SW5
 NSUUID *uuid = [[UIDevice currentDevice] identifierForVendor];
 unsigned char uuidBytes[16];
 [uuid getUUIDBytes:uuidBytes];

 // Order taken from: https://developer.apple.com/library/content/releasenotes/General/ValidateAppStoreReceipt/Chapters/ValidateLocally.html#//apple_ref/doc/uid/TP40010573-CH1-SW5
 NSMutableData *data = [NSMutableData data];
 [data appendBytes:uuidBytes length:sizeof(uuidBytes)];
 [data appendData:self.opaqueValue];
 [data appendData:self.bundleIdentifierData];

 NSMutableData *expectedHash = [NSMutableData dataWithLength:SHA_DIGEST_LENGTH];
 SHA1(data.bytes, data.length, expectedHash.mutableBytes);

 return [expectedHash isEqualToData:self.hash];
}
</code></pre>

And that's the gist of it. I might be missing something here or there, so I might come back to this post later. In any case, I recommend browsing the complete code for more details.

blocks|key|2983742|text|我很惊讶这里没有人提到Receigen。它是一个自动生成模糊的收据验证代码的工具，每次生成一个不同的代码；它同时支持GUI和命令行操作。强烈推荐。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2983743|(与Receigen无关，只是一个快乐的用户。)|2983744|当我输入rake+receigen时，我使用这样的Rakefile自动重新运行Receigen+(因为每次版本更改都需要这样做|style|CODE|2983745|desc+"Regenerate+App+Store+Receipt+validation+code+using+Receigen+app+(which+must+be+already+installed)"
task+:receigen+do
++#+TODO:+modify+these+to+match+your+app
++bundle_id+=+'com.example.YourBundleIdentifierHere'
++output_file+=+File.join(__dir__,+'SomeDir/ReceiptValidation.h')

++version+=+PList.get(File.join(__dir__,+'YourProjectFolder/Info.plist'),+'CFBundleVersion')
++command+=+%25Q</Applications/Receigen.app/Contents/MacOS/Receigen+--identifier+#{bundle_id}+--version+#{version}+--os+ios+--prefix+ReceiptValidation+--success+callblock+--failure+callblock>
++puts+"#{command}+>+#{output_file}"
++data+=+`#{command}`
++File.open(output_file,+'w')+{+%7Cf%7C+f.write(data)+}
end

module+PList
++def+self.get+file_name,+key
++++if+File.read(file_name)+=~+%25r!<key>#{Regexp.escape(key)}</key>\s*<string>(.*?)</string>!
++++++$1.strip
++++else
++++++nil
++++end
++end
end|code-block|syntax|javascript|2983746|entityMap|0|LINK|mutability|MUTABLE|url|http://receigen.etiemble.com/^0|B|8|0|0|0|4|D|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@$A|X|B|Y|1|Z]]|C|$]]|$1|D|3|E|5|6|7|10|8|@]|9|@]|C|$]]|$1|F|3|G|5|6|7|11|8|@$A|12|B|13|H|I]]|9|@]|C|$]]|$1|J|3|K|5|L|7|14|8|@]|9|@]|C|$M|N]]|$1|O|3|-4|5|6|7|15|8|@]|9|@]|C|$]]]|P|$Q|$5|R|S|T|C|$U|V]]]]

I'm surprised nobody mentioned <a href="http://receigen.etiemble.com">Receigen</a> here. It's a tool that automatically generates obfuscated receipt validation code, a different one each time; it supports both GUI and command-line operation. Highly recommended.

(Not affiliated with Receigen, just a happy user.)

I use a Rakefile like this to automatically rerun Receigen (because it needs to be done on every version change) when I type <code>rake receigen</code>:

<pre><code>desc "Regenerate App Store Receipt validation code using Receigen app (which must be already installed)"
task :receigen do
 # TODO: modify these to match your app
 bundle_id = 'com.example.YourBundleIdentifierHere'
 output_file = File.join(__dir__, 'SomeDir/ReceiptValidation.h')

 version = PList.get(File.join(__dir__, 'YourProjectFolder/Info.plist'), 'CFBundleVersion')
 command = %Q&lt;/Applications/Receigen.app/Contents/MacOS/Receigen --identifier #{bundle_id} --version #{version} --os ios --prefix ReceiptValidation --success callblock --failure callblock&gt;
 puts "#{command} &gt; #{output_file}"
 data = `#{command}`
 File.open(output_file, 'w') { |f| f.write(data) }
end

module PList
 def self.get file_name, key
 if File.read(file_name) =~ %r!&lt;key&gt;#{Regexp.escape(key)}&lt;/key&gt;\s*&lt;string&gt;(.*?)&lt;/string&gt;!
 $1.strip
 else
 nil
 end
 end
end
</code></pre>

blocks|key|2770670|text|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2770671|注意:不建议在客户端进行这种类型的验证|blockquote|2770672|2770673|2770674|这是一个Swift+4版本，用于验证应用内购买收据...|offset|length|style|BOLD|2770675|让我们创建一个枚举来表示收据验证的可能错误|2770676|enum+ReceiptValidationError:+Error+{
++++case+receiptNotFound
++++case+jsonResponseIsNotValid(description:+String)
++++case+notBought
++++case+expired
}|code-block|syntax|javascript|2770677|然后让我们创建一个验证收据的函数，如果不能验证，它将抛出一个错误。|2770678|func+validateReceipt()+throws+{
++++guard+let+appStoreReceiptURL+=+Bundle.main.appStoreReceiptURL,+FileManager.default.fileExists(atPath:+appStoreReceiptURL.path)+else+{
++++++++throw+ReceiptValidationError.receiptNotFound
++++}
++++
++++let+receiptData+=+try!+Data(contentsOf:+appStoreReceiptURL,+options:+.alwaysMapped)
++++let+receiptString+=+receiptData.base64EncodedString()
++++let+jsonObjectBody+=+["receipt-data"+:+receiptString,+"password"+:+<#String#>]
++++
++++#if+DEBUG
++++let+url+=+URL(string:+"https://sandbox.itunes.apple.com/verifyReceipt")!
++++#else
++++let+url+=+URL(string:+"https://buy.itunes.apple.com/verifyReceipt")!
++++#endif
++++
++++var+request+=+URLRequest(url:+url)
++++request.httpMethod+=+"POST"
++++request.httpBody+=+try!+JSONSerialization.data(withJSONObject:+jsonObjectBody,+options:+.prettyPrinted)
++++
++++let+semaphore+=+DispatchSemaphore(value:+0)
++++
++++var+validationError+:+ReceiptValidationError?
++++
++++let+task+=+URLSession.shared.dataTask(with:+request)+{+data,+response,+error+in
++++++++guard+let+data+=+data,+let+httpResponse+=+response+as?+HTTPURLResponse,+error+==+nil,+httpResponse.statusCode+==+200+else+{
++++++++++++validationError+=+ReceiptValidationError.jsonResponseIsNotValid(description:+error?.localizedDescription+??+"")
++++++++++++semaphore.signal()
++++++++++++return
++++++++}
++++++++guard+let+jsonResponse+=+(try?+JSONSerialization.jsonObject(with:+data,+options:+JSONSerialization.ReadingOptions.mutableContainers))+as?+[AnyHashable:+Any]+else+{
++++++++++++validationError+=+ReceiptValidationError.jsonResponseIsNotValid(description:+"Unable+to+parse+json")
++++++++++++semaphore.signal()
++++++++++++return
++++++++}
++++++++guard+let+expirationDate+=+self.expirationDate(jsonResponse:+jsonResponse,+forProductId:+<#String#>)+else+{
++++++++++++validationError+=+ReceiptValidationError.notBought
++++++++++++semaphore.signal()
++++++++++++return
++++++++}
++++++++
++++++++let+currentDate+=+Date()
++++++++if+currentDate+>+expirationDate+{
++++++++++++validationError+=+ReceiptValidationError.expired
++++++++}
++++++++
++++++++semaphore.signal()
++++}
++++task.resume()
++++
++++semaphore.wait()
++++
++++if+let+validationError+=+validationError+{
++++++++throw+validationError
++++}
}|2770679|让我们使用这个helper函数，来获取特定产品的过期日期。该函数接收JSON响应和产品id。JSON响应可以包含不同产品的多个收据信息，因此它可以获取指定参数的最新信息。|2770680|func+expirationDate(jsonResponse:+[AnyHashable:+Any],+forProductId+productId+:String)+->+Date?+{
++++guard+let+receiptInfo+=+(jsonResponse["latest_receipt_info"]+as?+[[AnyHashable:+Any]])+else+{
++++++++return+nil
++++}
++++
++++let+filteredReceipts+=+receiptInfo.filter{+return+($0["product_id"]+as?+String)+==+productId+}
++++
++++guard+let+lastReceipt+=+filteredReceipts.last+else+{
++++++++return+nil
++++}
++++
++++let+formatter+=+DateFormatter()
++++formatter.dateFormat+=+"yyyy-MM-dd+HH:mm:ss+VV"
++++
++++if+let+expiresString+=+lastReceipt["expires_date"]+as?+String+{
++++++++return+formatter.date(from:+expiresString)
++++}
++++
++++return+nil
}|2770681|现在，您可以调用此函数并处理可能的错误情况|2770682|do+{
++++try+validateReceipt()
++++//+The+receipt+is+valid+
++++print("Receipt+is+valid")
}+catch+ReceiptValidationError.receiptNotFound+{
++++//+There+is+no+receipt+on+the+device+
}+catch+ReceiptValidationError.jsonResponseIsNotValid(let+description)+{
++++//+unable+to+parse+the+json+
++++print(description)
}+catch+ReceiptValidationError.notBought+{
++++//+the+subscription+hasn't+being+purchased+
}+catch+ReceiptValidationError.expired+{
++++//+the+subscription+is+expired+
}+catch+{
++++print("Unexpected+error:+\(error).")
}|2770683|2770684|您可以从应用商店连接获取密码。https://developer.apple.com打开此链接，单击|CODE|2770685|2770686|2770687|2770688|Account+tab|unordered-list-item|2770689|Do+Sign+in|2770690|Open+iTune+Connect|2770691|Open+My+App|2770692|Open+Feature+Tab|2770693|Open+In+App+Purchase|2770694|Click+at+the+right+side+on+'View+Shared+Secret'|2770695|At+the+bottom+you+will+get+a+secrete+key|2770696|2770697|2770698|复制密钥并将其粘贴到密码字段中。|2770699|2770700|entityMap^0|0|0|0|0|4|7|0|0|0|0|0|0|0|0|0|0|C|2|F|R|0|0|0|0|0|B|0|0|A|0|0|I|0|0|B|0|0|G|0|0|K|0|0|1B|0|0|14|0|0|0|0|0^^$0|@$1|2|3|-4|4|5|6|1Z|7|@]|8|@]|9|$]]|$1|A|3|B|4|C|6|20|7|@]|8|@]|9|$]]|$1|D|3|-4|4|5|6|21|7|@]|8|@]|9|$]]|$1|E|3|-4|4|5|6|22|7|@]|8|@]|9|$]]|$1|F|3|G|4|5|6|23|7|@$H|24|I|25|J|K]]|8|@]|9|$]]|$1|L|3|M|4|5|6|26|7|@]|8|@]|9|$]]|$1|N|3|O|4|P|6|27|7|@]|8|@]|9|$Q|R]]|$1|S|3|T|4|5|6|28|7|@]|8|@]|9|$]]|$1|U|3|V|4|P|6|29|7|@]|8|@]|9|$Q|R]]|$1|W|3|X|4|5|6|2A|7|@]|8|@]|9|$]]|$1|Y|3|Z|4|P|6|2B|7|@]|8|@]|9|$Q|R]]|$1|10|3|11|4|5|6|2C|7|@]|8|@]|9|$]]|$1|12|3|13|4|P|6|2D|7|@]|8|@]|9|$Q|R]]|$1|14|3|-4|4|5|6|2E|7|@]|8|@]|9|$]]|$1|15|3|16|4|C|6|2F|7|@$H|2G|I|2H|J|K]|$H|2I|I|2J|J|17]]|8|@]|9|$]]|$1|18|3|-4|4|5|6|2K|7|@]|8|@]|9|$]]|$1|19|3|-4|4|5|6|2L|7|@]|8|@]|9|$]]|$1|1A|3|-4|4|5|6|2M|7|@]|8|@]|9|$]]|$1|1B|3|1C|4|1D|6|2N|7|@$H|2O|I|2P|J|17]]|8|@]|9|$]]|$1|1E|3|1F|4|1D|6|2Q|7|@$H|2R|I|2S|J|17]]|8|@]|9|$]]|$1|1G|3|1H|4|1D|6|2T|7|@$H|2U|I|2V|J|17]]|8|@]|9|$]]|$1|1I|3|1J|4|1D|6|2W|7|@$H|2X|I|2Y|J|17]]|8|@]|9|$]]|$1|1K|3|1L|4|1D|6|2Z|7|@$H|30|I|31|J|17]]|8|@]|9|$]]|$1|1M|3|1N|4|1D|6|32|7|@$H|33|I|34|J|17]]|8|@]|9|$]]|$1|1O|3|1P|4|1D|6|35|7|@$H|36|I|37|J|17]]|8|@]|9|$]]|$1|1Q|3|1R|4|1D|6|38|7|@$H|39|I|3A|J|17]]|8|@]|9|$]]|$1|1S|3|-4|4|5|6|3B|7|@]|8|@]|9|$]]|$1|1T|3|-4|4|5|6|3C|7|@]|8|@]|9|$]]|$1|1U|3|1V|4|C|6|3D|7|@]|8|@]|9|$]]|$1|1W|3|-4|4|5|6|3E|7|@]|8|@]|9|$]]|$1|1X|3|-4|4|5|6|3F|7|@]|8|@]|9|$]]]|1Y|$]]

<blockquote>
Note: It's not recommend to do this type of verification in the client side
</blockquote>
This is a Swift 4 version for validation of in-app-purchase receipt...
Lets create an enum to represent the possible errors of the receipt validation
<pre><code>enum ReceiptValidationError: Error {
 case receiptNotFound
 case jsonResponseIsNotValid(description: String)
 case notBought
 case expired
}
</code></pre>
Then let's create the function that validates the receipt, it will throws an error if it's unable to validate it.
<pre><code>func validateReceipt() throws {
 guard let appStoreReceiptURL = Bundle.main.appStoreReceiptURL, FileManager.default.fileExists(atPath: appStoreReceiptURL.path) else {
 throw ReceiptValidationError.receiptNotFound
 }
 
 let receiptData = try! Data(contentsOf: appStoreReceiptURL, options: .alwaysMapped)
 let receiptString = receiptData.base64EncodedString()
 let jsonObjectBody = [&quot;receipt-data&quot; : receiptString, &quot;password&quot; : &lt;#String#&gt;]
 
 #if DEBUG
 let url = URL(string: &quot;https://sandbox.itunes.apple.com/verifyReceipt&quot;)!
 #else
 let url = URL(string: &quot;https://buy.itunes.apple.com/verifyReceipt&quot;)!
 #endif
 
 var request = URLRequest(url: url)
 request.httpMethod = &quot;POST&quot;
 request.httpBody = try! JSONSerialization.data(withJSONObject: jsonObjectBody, options: .prettyPrinted)
 
 let semaphore = DispatchSemaphore(value: 0)
 
 var validationError : ReceiptValidationError?
 
 let task = URLSession.shared.dataTask(with: request) { data, response, error in
 guard let data = data, let httpResponse = response as? HTTPURLResponse, error == nil, httpResponse.statusCode == 200 else {
 validationError = ReceiptValidationError.jsonResponseIsNotValid(description: error?.localizedDescription ?? &quot;&quot;)
 semaphore.signal()
 return
 }
 guard let jsonResponse = (try? JSONSerialization.jsonObject(with: data, options: JSONSerialization.ReadingOptions.mutableContainers)) as? [AnyHashable: Any] else {
 validationError = ReceiptValidationError.jsonResponseIsNotValid(description: &quot;Unable to parse json&quot;)
 semaphore.signal()
 return
 }
 guard let expirationDate = self.expirationDate(jsonResponse: jsonResponse, forProductId: &lt;#String#&gt;) else {
 validationError = ReceiptValidationError.notBought
 semaphore.signal()
 return
 }
 
 let currentDate = Date()
 if currentDate &gt; expirationDate {
 validationError = ReceiptValidationError.expired
 }
 
 semaphore.signal()
 }
 task.resume()
 
 semaphore.wait()
 
 if let validationError = validationError {
 throw validationError
 }
}
</code></pre>
Let's use this helper function, to get the expiration date of a specific product. The function receives a JSON response and a product id. The JSON response can contain multiple receipts info for different products, so it get the last info for the specified parameter.
<pre><code>func expirationDate(jsonResponse: [AnyHashable: Any], forProductId productId :String) -&gt; Date? {
 guard let receiptInfo = (jsonResponse[&quot;latest_receipt_info&quot;] as? [[AnyHashable: Any]]) else {
 return nil
 }
 
 let filteredReceipts = receiptInfo.filter{ return ($0[&quot;product_id&quot;] as? String) == productId }
 
 guard let lastReceipt = filteredReceipts.last else {
 return nil
 }
 
 let formatter = DateFormatter()
 formatter.dateFormat = &quot;yyyy-MM-dd HH:mm:ss VV&quot;
 
 if let expiresString = lastReceipt[&quot;expires_date&quot;] as? String {
 return formatter.date(from: expiresString)
 }
 
 return nil
}
</code></pre>
Now you can call this function and handle of the possible error cases
<pre><code>do {
 try validateReceipt()
 // The receipt is valid 
 print(&quot;Receipt is valid&quot;)
} catch ReceiptValidationError.receiptNotFound {
 // There is no receipt on the device 
} catch ReceiptValidationError.jsonResponseIsNotValid(let description) {
 // unable to parse the json 
 print(description)
} catch ReceiptValidationError.notBought {
 // the subscription hasn't being purchased 
} catch ReceiptValidationError.expired {
 // the subscription is expired 
} catch {
 print(&quot;Unexpected error: \(error).&quot;)
}
</code></pre>
<blockquote>
You can get a Password from the App Store Connect. <code>https://developer.apple.com</code> open this link click on
</blockquote>
<ul>
<li><code>Account tab</code></li>
<li><code>Do Sign in</code></li>
<li><code>Open iTune Connect</code></li>
<li><code>Open My App</code></li>
<li><code>Open Feature Tab</code></li>
<li><code>Open In App Purchase</code></li>
<li><code>Click at the right side on 'View Shared Secret'</code></li>
<li><code>At the bottom you will get a secrete key</code></li>
</ul>
<blockquote>
Copy that key and paste into the password field.
</blockquote>

I have read a lot of docs and code that in theory will validate an in-app and/or bundle receipt. 

Given that my knowledge of SSL, certificates, encryption, etc., is nearly zero, all of the explanations I have read, <a href="https://github.com/rmaddy/VerifyStoreReceiptiOS">like this promising one</a>, I have found difficult to understand.

They say the explanations are incomplete because every person has to figure out how to do it, or the hackers will have an easy job creating a cracker app that can recognize and identify patterns and patch the application. OK, I agree with this up to a certain point. I think they could explain completely how to do it and put a warning saying "modify this method", "modify this other method", "obfuscate this variable", "change the name of this and that", etc. 

Can some good soul out there be kind enough to explain how to LOCALLY validate, bundle receipts and in-app purchase receipts on iOS 7 as I am five years old (ok, make it 3), from top to bottom, clearly?

Thanks!!!

<hr>

If you have a version working on your apps and your concerns are that hackers will see how you did it, simply change your sensitive methods before publishing here. Obfuscate strings, change the order of lines, change the way you do loops (from using for to block enumeration and vice-versa) and things like that. Obviously, every person that uses the code that may be posted here, has to do the same thing, not to risk being easily hacked.

A complete solution to LOCALLY validate an in-app receipts and bundle receipts on iOS 7

容器

Swift

MacOS

JSON

我已经阅读了很多文档和代码，理论上可以验证应用内和/或捆绑收据。鉴于我对SSL、证书、加密等的了解几乎为零，我读过的所有解释，，我发现很难理解。他们说，解释是不完整的，因为每个人都必须弄清楚如何做到这一点，否则黑客将很容易创建一个黑客应用程序，可以识别和识别模式，并修补应用程序。好吧，我在一定程度上同意这一点。我认为他...

问在iOS 7上本地验证应用内收据和捆绑收据的完整解决方案
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在iOS 7上本地验证应用内收据和捆绑收据的完整解决方案EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在iOS 7上本地验证应用内收据和捆绑收据的完整解决方案
EN