php - iOS : How to get Server-side receipt validation? 的自动更新订阅
<p><p>我刚刚完成开发我的应用程序，创建我的 Apple 组织帐户，在 iTunes 连接端创建我需要的所有内容，但我现在的问题是开发 <strong> <a href="https://developer.apple.com/library/content/releasenotes/General/ValidateAppStoreReceipt/Chapters/ValidateRemotely.html#//apple_ref/doc/uid/TP40010573-CH104-SW1" rel="noreferrer noopener nofollow">server-side receipt validation</a> </strong>(因为 <a href="https://developer.apple.com/library/content/releasenotes/General/ValidateAppStoreReceipt/Chapters/ValidateLocally.html#//apple_ref/doc/uid/TP40010573-CH1-SW2" rel="noreferrer noopener nofollow">Validating Receipts Locally</a> 似乎有一些<strong>潜在的人在中间的安全问题</strong>)。 </p>
<pre><code>...
// Load the receipt from the app bundle.
NSURL *receiptURL = [ appStoreReceiptURL];
NSData *receipt = ;
if (!receipt) { /* No local receipt -- handle the error. */ }
/* ... Send the receipt data to your server ... */
...
</code></pre>
<p>我非常了解该图片上描述的验证过程:</p>
<p> <a href="/image/M4QJT.png" rel="noreferrer noopener nofollow"><img src="/image/M4QJT.png" alt="enter image description here"/></a> </p>
<p>我的主要问题是我不是服务器问题的专家，如果您有一些示例说明我必须为收据验证编写什么代码以及我必须使用什么技术(PHP、Angular 或其他... )。</p>
<p>(<strong>第一个例子:</strong>在那个 <a href="https://stackoverflow.com/questions/5017731/any-early-experiences-with-auto-renewable-subscriptions-for-ios" rel="noreferrer noopener nofollow">ticket</a> 上，服务器端的代码是否足以完成验证？)</p>
<p>(<strong>第二个例子:</strong> 使用 JSON 将 UDID 和 Base64 编码的收据发送到服务器，服务器询问应用商店，应用商店发送ok，服务器发送ok到app。如果是好的流程，我可以轻松搞定。<a href="https://stackoverflow.com/questions/1581246/how-can-my-server-securely-authenticate-iphone-in-app-purchase/1794470?s=3%7C0.0000#1794470" rel="noreferrer noopener nofollow">Ticket 2</a>
提前致谢。</p></p>
<br><hr><h1><strong>Best Answer-推荐答案</ strong></h1><br>
<p><p>这是我的解决方案:</p>
<p>我使用我的服务器来验证我的收据，如下所示:</p>
<p> <a href="https://github.com/aporat/store-receipt-validator" rel="noreferrer noopener nofollow">https://github.com/aporat/store-receipt-validator</a> </p>
<pre><code>use ReceiptValidator\iTunes\Validator as iTunesValidator;
$validator = new iTunesValidator(iTunesValidator::ENDPOINT_PRODUCTION); // Or iTunesValidator::ENDPOINT_SANDBOX if sandbox testing
$receiptBase64Data = 'ewoJ
......
OVG8xTlNCRmRHTXZSMDFVSWpzS2ZRPT0iOwoJImVudmlyb25tZW50IiA9ICJTYW5kYm94IjsKCSJwb2QiID0gIjEwMCI7Cgkic2lnbmluZy1zdGF0dXMiID0gIjAiOwp9';
try {
$response = $validator->setReceiptData($receiptBase64Data)->validate();
// $sharedSecret = '1234...'; // Generated in iTunes Connect's In-App Purchase menu
// $response = $validator->setSharedSecret($sharedSecret)->setReceiptData($receiptBase64Data)->validate(); // use setSharedSecret() if for recurring subscriptions
} catch (Exception $e) {
echo 'got error = ' . $e->getMessage() . PHP_EOL;
}
if ($response->isValid()) {
echo 'Receipt is valid.' . PHP_EOL;
echo 'Receipt data = ' . print_r($response->getReceipt()) . PHP_EOL;
} else {
echo 'Receipt is not valid.' . PHP_EOL;
echo 'Receipt result code = ' . $response->getResultCode() . PHP_EOL;
}
</code></pre>
<p>我服务器上的 WS 发送给我是否正常。</p>
<p>(对于iPad上的本地进程不建议使用，您可以在这里找到它:<a href="https://stackoverflow.com/questions/14976453/im-getting-21004-as-status-value-in-reply-from-apples-sandbox-server-testing-a?utm_medium=organic&utm_source=google_rich_qa&utm_campaign=google_rich_qa" rel="noreferrer noopener nofollow">I'm getting 21004 as status value in reply from apple's sandbox server testing auto-renewable subscriptions in ios?</a>)</p></p>
<p style="font-size: 20px;">关于php - iOS : How to get Server-side receipt validation? 的自动更新订阅，我们在Stack Overflow上找到一个类似的问题：
<a href="https://stackoverflow.com/questions/47892798/" rel="noreferrer noopener nofollow" style="color: red;">
https://stackoverflow.com/questions/47892798/
</a>
</p>
页:
[1]