Comments (2)
Hi @smilingpoplar,
The solution for receipt validation in CargoBay is more or less the same as the solution Apple provided in In-App Purchase Receipt Validation on iOS.
Every transactionReceipt
is tied to the device and in its data contains the device unique identifier (for iOS 5 and below) and unique identifier for vendor (for iOS 6 and above). The needs to validate against the unique identifier/unique identifier for vendor is to prevent a valid transactionReceipt
that is meant for another device from passing the verification. Its kinda an important security check.
In Apple's solution, they did the same things as well. In fact, they also provides 2 private API below:
extern CFStringRef kSecTrustInfoExtendedValidationKey;
extern CFDictionaryRef SecTrustCopyInfo(SecTrustRef trust);
In the link, they mentioned
Note: This listing uses the symbols kSecTrustInfoExtendedValidationKey and SecTrustCopyInfo, which are not public API. Your app is allowed to use them for this specific purpose.
If Apple reviewing team asked, let them know that it is for receipt validation use only. Link them to this project and the link above. I strongly believe it shouldn't cause your project to be rejected.
Let me know if you face any problem, will be gladly to help you out promptly.
from cargobay.
@lxcid Thanks for the explanation.
from cargobay.
Related Issues (20)
- iOS 8 Feature - Ask To Buy HOT 1
- Local Receipt Verification Example HOT 1
- to incompatible type Warning:[CargoBayProductRequestDelegate registerDelegate:delegate]; HOT 1
- Cargobay Verify Receipt not working on Yosemite HOT 1
- No warning against using verifyTransaction with Apple's servers in production
- are you going to update pods? HOT 1
- transactionReceipt always return nil on iOS 9 Beta2 HOT 2
- Memory leak in CBCheckReceiptSecurity function HOT 1
- verifyTransactionReceipt is failing to parse receipt data on iOS 9 HOT 2
- AFNetworking 3.0 HOT 1
- Will CargoBay break in-apps verification after February 14, 2016? HOT 11
- Certificate used for local receipt validation has expired HOT 1
- Transaction verification always fails due to incorrect value stored in signatureBlob->_receiptVersion. HOT 1
- Errors on validating purchased and restored products
- Is this library still active?
- Please upgarde to AFNetworking 3.0 HOT 1
- Warning Xcode 9 on line 555
- Will you upgrade to AFNetworking 3.0? HOT 1
- Can this be used to verify the app's receipt on MacOS?
- Are you going to update this repo?
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cargobay.