Ruby Gem for Rails - Easy iTunes In-App Purchase Receipt validation, including auto-renewable subscriptions

It looks like Apple changed the way they send receipts such that they no longer appear in order of expiration date.

This fixes the issue by removing assumptions about the last receipt from Apple being the active one. Instead we look for the receipt with the most recent expiration date.

I also added Byebug and Timecop for testing purposes. Timecop I needed to make the tests pass, byebug I could remove if folks don't like it.

Thanks for making this awesome gem!

Question: does the gem handle cancellation_date from the apple response? https://developer.apple.com/library/prerelease/content/releasenotes/General/ValidateAppStoreReceipt/Chapters/ReceiptFields.html#//apple_ref/doc/uid/TP40010573-CH106-SW1

Seems like response.is_subscription_active? might do it, but I can't find any reference to cancellation_date in the code.

Thanks again!

Apple does not guarantee an order for the array in @latest_receipt_info. latest_receipt_info.last is not guaranteed to return the newest receipt.

Monza must explicitly sort @latest_receipt_info by the respective timestamps or things will break (we got bitten by this today 😢).

Deprecated: latest_receipt, latest_receipt_info, latest_expired_receipt, latest_expired_receipt_info.

According Apple documentation latest_receipt, latest_receipt_info, latest_expired_receipt, latest_expired_receipt_info are unavailable (since 10 March 2021) in JSON response.

This PR will fix that.

The grace period fields are optional, but commit https://github.com/gabrielgarza/monza/commit/f72358193834d1ae53deada319f634ec1490e369 assumes it will always be present.

With the grace period off the receipt verification returns nil. The parsing logic needs to confirm the fields are available.

Apple documentation says the following:

Cancellation Date

For a transaction that was canceled by Apple customer support, the time and date of the cancellation. For an auto-renewable subscription plan that was upgraded, the time and date of the upgrade transaction. ... Treat a canceled receipt the same as if no purchase had ever been made.

However, Monza was not considering the cancellation date when checking if a receipt represented an active subscription.

This addresses issue #24.

Hi! I use this gem in my projects, Thanks!

But, I have a problem.

in rails config

class Application < Rails::Application
  config.time_zone = 'Tokyo'
end

=> set Time.zone_default, so Time.zone access zone_default without current time_zone

https://github.com/rails/rails/blob/cfb1e4dfd8813d3d5c75a15a750b3c53eebdea65/activesupport/lib/active_support/core_ext/time/zones.rb#L15

However, in monza config

Time.zone = Time.zone ? Time.zone : "UTC"

So, monza updates not zone_default but current time_zone. Therefore, even if the I set zone_default is 'Tokyo' in rails config, Time.zone will become 'UTC' in my application.

Please confirm!

🙇

Apple does not guarantee the order of receipts within latest_receipt_info, so the active subscription might not be the last one in the array.

• is_subscription_active? will now check all receipt objects for the max expiration date and check that one

Apple frequently replies to the verify-call with an older receipt format in which various fields that Monza expects are either absent or of a different datatype.

First of all, thanks for a great, useful library!

I noticed here:

https://github.com/gabrielgarza/monza/blob/master/lib/monza/client.rb#L38

You are silently ignoring an exception. What's the rational here?

In such cases where I feel pretty confident it's okay, I will still log to STDOUT just in case something goes wrong and i want to audit logs later.

rescue => e
  puts "error when blah blah: #{e.class}: #{e.message}
  nil
end

I am getting this error when I try to follow the example to call Monza::Receipt.verify in Ruby:

2017-08-13 01:23:49 - Monza::VerificationResponse::VerificationError - The data in the receipt-data property was malformed.:

This is the line in the .rb file that causes the error:

response = Monza::Receipt.verify(data, options)

I get the base 64 encoded string with the following swift code:

if let appStoreReceiptURL = Bundle.main.appStoreReceiptURL, FileManager.default.fileExists(atPath: appStoreReceiptURL.path) { do { let receiptData = try Data(contentsOf: appStoreReceiptURL, options: .alwaysMapped) let receiptString = receiptData.base64EncodedString(options: [])

Then I send the receiptString to the server. What do I need to do to form the receipt data?