A lightweight iOS library for In-App Purchases

The completion block of restoreOnSuccess does not provide and productID's of IAP's, so I have to manually add/remove the observe and implement an extra method that gets notifications when products have been purchased/restored. It would simply save some time/code if the completion block returns restored product ID's.

RMAppReceipt uses OpenSSL to extract the app receipt as ASN1 data from the PKCS7 container and then parse the ASN1 data into an object.

In order to avoid external dependencies it would be better to use system frameworks instead. Sadly, my cryptography-fu is not strong enough to do it. Any takers?

According to the this app, it appears to be possible.

When running pod install for the first time on a project with RMStore the project will not build. You have to link the Pods-RMStore target in the Pods project with the libssl and libcrypto libraries.

Relevant portion of build log:

(null): "_d2i_PKCS7_fp", referenced from:
(null): +[RMAppReceipt dataFromPCKS7Path:] in libPods.a(RMAppReceipt.o)
(null): "_SHA1", referenced from:
(null): -[RMAppReceipt verifyReceiptHash] in libPods.a(RMAppReceipt.o)
(null): "_PKCS7_free", referenced from:
(null): +[RMAppReceipt dataFromPCKS7Path:] in libPods.a(RMAppReceipt.o)
(null): "_ASN1_get_object", referenced from:
(null): _RMASN1ReadInteger in libPods.a(RMAppReceipt.o)
(null): _RMASN1ReadOctectString in libPods.a(RMAppReceipt.o)
(null): _RMASN1ReadString in libPods.a(RMAppReceipt.o)
(null): +[RMAppReceipt enumerateASN1Attributes:length:usingBlock:] in libPods.a(RMAppReceipt.o)
(null): Symbol(s) not found for architecture armv7s
(null): Linker command failed with exit code 1 (use -v to see invocation)

Podfile:

platform :ios, '7.0'
pod 'RMStore', '~> 0.4.2'

I am testing on a device in iOS 7 in the sandbox. I logged out of my iTunes account and cleared the keychain data. I downloaded a fresh version of the app and used a brand new test account. I hit the Restore button for my non-consumable product. I was asked to enter my iTunes ID and password twice, even though I am positive I entered it correctly the first time. The product was then restored successfully, even though it had not yet been purchased by this test account user. I tried this with multiple test accounts and it is reproducible every time.

About watchdog timer feature.

Watchdog will throw a timeout error in case of network lag on products request. It guarantees fixed time response to customer after his tap on Purchase button for in-app.

I didn't include example in commit but my use case is below. In my apps after user taps "Purchase" button I show modal activity indicator view then make products request via RMStore. If I've got a products response before watchdog timer fires then there is a big probability that Apple servers will be reachable while payment transaction also. If network is bad I get timeout error from watchdog timer. Then I can choose to dismiss modal activity indicator view and place payment (with network activity indicator as in your example) or show "Try to Retry" message for customer in case of timeout error accordingly.

P.S. Thanks for great library. Keep rocking!

The app version mismatched the bundle version. By using short sting we are checking for the correct app version.

Issue:https://github.com/robotmedia/RMStore/issues/58 Info about the change: http://stackoverflow.com/questions/6876923/difference-between-xcode-version-cfbundleshortversionstring-and-build-cfbundl

I was using RMStore from a downloaded file, but I'v changed to pods now and it can't find RMStoreAppReceiptVerificator.h/.m. The problem is at the .podspec it states that the subspec 'AppReceiptVerificator' be available only for iOS 7.0, but my app deployment target is 5.0. What should I do? Change my pod file to 7.0 only for RMStore? Or what? I have configured RMStore just like the demo Proyect with this line:

_receiptVerificator = iOS7OrHigher ? [[RMStoreAppReceiptVerificator alloc] init] : [[RMStoreTransactionReceiptVerificator alloc] init]; [RMStore defaultStore].receiptVerificator = _receiptVerificator;

Thanks

In my applications I am using RMStore library. After calling addPayment:success:failure method of RMStore class, I am doing receipt validation locally. But after validation where I will get the transaction receipt. Sample receipt after verification is below.

{ environment = Sandbox; receipt = { "adam_id" = 0; "application_version" = "1.6"; "bundle_id" = "Some bundle id"; "download_id" = 0; "in_app" = ( { "is_trial_period" = false; "original_purchase_date" = "2013-10-10 06:43:45 Etc/GMT"; "original_purchase_date_ms" = 1381387425000; "original_purchase_date_pst" = "2013-10-09 23:43:45 America/Los_Angeles"; "original_transaction_id" = 1000000089656289; "product_id" = "product_id"; "purchase_date" = "2013-12-03 08:24:49 Etc/GMT"; "purchase_date_ms" = 1386059089000; "purchase_date_pst" = "2013-12-03 00:24:49 America/Los_Angeles"; quantity = 1; "transaction_id" = 1000000089656289; }, { "is_trial_period" = false; "original_purchase_date" = "2013-12-03 08:24:49 Etc/GMT"; "original_purchase_date_ms" = 1386059089000; "original_purchase_date_pst" = "2013-12-03 00:24:49 America/Los_Angeles"; "original_transaction_id" = 1000000095357076; "product_id" = "product_id"; "purchase_date" = "2013-12-03 08:24:49 Etc/GMT"; "purchase_date_ms" = 1386059089000; "purchase_date_pst" = "2013-12-03 00:24:49 America/Los_Angeles"; quantity = 1; "transaction_id" = 1000000095357076; } ); "receipt_type" = ProductionSandbox; "request_date" = "2013-12-03 08:24:56 Etc/GMT"; "request_date_ms" = 1386059096603; "request_date_pst" = "2013-12-03 00:24:56 America/Los_Angeles"; }; status = 0; }

Hello,

I used the RMStoreAppReceiptVerificator's method verifyAppReceipt:to verify my receipt offline and then the RMAppReceipt's containsInAppPurchaseOfProductIdentifier: method to find out if a user has bought a specific product. That worked very well!

Today I just updated to 0.5 and found out that some things have changed.... So I am wondering if I need to adopt my code?

In the Wiki (https://github.com/robotmedia/RMStore/wiki/Receipt-verification) it says that I need to add the 'Apple Inc. Root Certificate' to my project?!? Is this new since 0.5? Do I really have to add it?

And is there anything else I need to be aware?

Thanks, Georg

When I successfully restore a transactions with the following code:

 [[RMStore defaultStore] restoreTransactionsOnSuccess:^{
        // success handler
    } failure:^(NSError *error) {
        // failure handler
    }
 ]

And later call the following code to verify that the purchase restoration has been completed:

RMStore *store =[RMStore defaultStore];
RMStoreKeychainPersistence *transactionStore = store.transactionPersistor;

return [transactionStore isPurchasedProductOfIdentifier:@"myProductId"];

I get a result of "false" when I expect it to be "true" after restoring my purchase.

When I look at the RMStore.m code, it looks like there is no call to persist the transaction during the restore process.

Note: I am using RMStoreKeychainPersistence method to persist my IAP transactions.

Notes:

• Commit 0246df1 is a hack to fix an issue with restored transactions. Non-consumable products with downloadable content are some times restored twice. This happens (in the sandbox environment at least) the second time you call restoreCompletedTransactions or calling restoreCompletedTransactions after buying a different product first.
• The RMStore log "RMStore: restore transactions finished" in the case of downloadable content, shows much earlier than the storeRestoreTransactionsFinished: notification call, because the notification is posted once all the downloads are finished. I don't consider it a big issue but I just want to point it out.

This branch would break tests. If you approve the merge I would work on tests and documentation before you do the actual merge.

Hey!

We've seen that there haven't been any updates for quite some time. Does it still work on iOS 13? Does it support subscriptions still on the latest iOS?

We'd love to use RMStore as it has worked out perfectly for us in the past.

There's a very nasty logical flaw in RMAppReceipt's -containsActiveAutoRenewableSubscriptionOfProductIdentifier:forDate: method.

This method first sorts through the receipt records looking for the newest one (using the expiration date) and then only checks that single record against the given date. One major problem with this is that the real-life production App Store receipts sometimes have renewal records from the future in them. This means if you use the current date (or a date from a few hours ago, or yesterday, or whatever) as your reference date, this method will first find the newest possible record - which is sometimes one that has already been generated for the NEXT billing period. It will then check if the date comes after that record's start date - which of course it does not. It then erroneously returns NO.

I posted a long thread on twitter about my adventures tracking this down here: https://twitter.com/BigZaphod/status/1162094913552625665

In development (XCode 10, iOS12), I'm able to use RMAppReceipt to verify autorenewing subscriptions just fine, using:

RMAppReceipt *appReceipt = [RMAppReceipt bundleReceipt];  
    if (appReceipt) {
        isActive =  [appReceipt containsActiveAutoRenewableSubscriptionOfProductIdentifier:@"0001" 
        forDate:[NSDate date]];
    }
    if (isActive) {
        NSLog(@"PatronSignupViewController: Got a list of subscriptions, a subscription IS active! Restored!");
    } else { //if receipt does not contain an active subscription
        NSLog(@"PatronSignupViewController: Got a list of purchases, but Subscription NOT active!");

However, when I use TestFlight to beta test the app, the system can never find the autorenewing subscription (after I've purchased it in TestFlight - purchasing in TestFlight works fine in TestFlight too).

Is there something fundamentally different that I should be aware of when it comes to purchases, products, RMStore, and TestFlight and Sandbox behaviors? Thx