iOS Game Center 登陆验证实现

出自：http://www.jianshu.com/p/66c23799af18

为了少走弯路，参考了：
http://stackoverflow.com/questions/24621839/how-to-authenticate-the-gklocalplayer-on-my-third-party-server-using-php

先写个Tips:
1. 这个例子没有检查Game Center用户切换的情况
2. 为了尽量突出验证的过程，汇报显示排行榜等接口也没有列出
3. 如果出现“无法完成所请求的操作，因为 Game Center 未识别此应用程序。”，
  a. 请先检查BundleId是否一致
  b. 再检查看itunesconnect里是不是没有添加过排行榜或者成就设置，必须要至少添加一条
  c. Game Center需要登录你设置ITunesconnect设置过的测试帐号（不用有些资料说的必需新建帐号）

QQ20160419-1.png

QQ20160419-2.png

GameCenterUserVerify.h

#import <Foundation/Foundation.h>
#import <GameKit/GameKit.h>;

@interface GameCenterUserVerify : NSObject

+ (void)Verify;

@end

@interface GameCenterUserManager : NSObject

@end

GameCenterUserVerify.m

#import "GameCenterUserVerify.h"

@implementation GameCenterUserVerify

+ (void)Verify
{
    GKLocalPlayer *localPlayer = [GKLocalPlayer localPlayer];
    if (localPlayer.authenticated)
    {
        __weak GKLocalPlayer *useLocalPlayer = localPlayer;
        [useLocalPlayer generateIdentityVerificationSignatureWithCompletionHandler: ^(NSURL * _Nullable publicKeyUrl,
                                                                                      NSData * _Nullable signature,
                                                                                      NSData * _Nullable salt,
                                                                                      uint64_t timestamp,
                                                                                      NSError * _Nullable error) {
            if (error == nil)
            {
                [self verifyPlayer: useLocalPlayer.playerID // our verify routine: below
                      publicKeyUrl: publicKeyUrl
                         signature: signature
                              salt: salt
                         timestamp: timestamp];
            }
            else
            {
                // GameCenter returned an error; deal with it here.
            UnitySendMessage("_GameCenterManager_","IOSGameGameCenterVerifyFail",[[error localizedDescription] UTF8String]);
            }
        }];
    }
    else
    {
        // User is not authenticated; it makes no sense to try to verify them.
        UnitySendMessage("_GameCenterManager_","IOSGameGameCenterVerifyFail","Game center not logined.");
    }
}

+(void)verifyPlayer: (NSString*) playerID
       publicKeyUrl: (NSURL*) publicKeyUrl
          signature: (NSData*) signature
               salt: (NSData*) salt
          timestamp: (uint64_t) timestamp
{
    NSDictionary *paramsDict = @{ @"publicKeyUrl": [publicKeyUrl absoluteString],
                                  @"timestamp"   : [NSString stringWithFormat: @"%llu", timestamp],
                                  @"signature"   : [signature base64EncodedStringWithOptions: 0],
                                  @"salt"        : [salt base64EncodedStringWithOptions: 0],
                                  @"playerID"    : playerID,
                                  @"bundleID"    : [[NSBundle mainBundle] bundleIdentifier]
                                  };

    // NOTE: A lot of the code below was cribbed from another SO answer for which I have lost the URL.
    // FIXME: <When found, insert other-SO-answer URL here>

    // build payload
    NSMutableData *payload = [NSMutableData new];
    [payload appendData: [playerID dataUsingEncoding: NSASCIIStringEncoding]];
    [payload appendData: [[[NSBundle mainBundle] bundleIdentifier] dataUsingEncoding: NSASCIIStringEncoding]];

    uint64_t timestampBE = CFSwapInt64HostToBig(timestamp);
    [payload appendBytes: &timestampBE length: sizeof(timestampBE)];
    [payload appendData: salt];

    // Verify with server
    [self verifyPlayerOnServer: payload withSignature: signature publicKeyURL: publicKeyUrl];

}

+ (void) verifyPlayerOnServer: (NSData*) payload withSignature: signature publicKeyURL: (NSURL*) publicKeyUrl
{
    // hint courtesy of: http://stackoverflow.com/questions/24621839/how-to-authenticate-the-gklocalplayer-on-my-third-party-server-using-php
    NSDictionary *jsonDict = @{ @"data" : [payload base64EncodedStringWithOptions: 0],@"puk":[publicKeyUrl absoluteString],
                                @"sig":[signature base64EncodedStringWithOptions: 0]};

    //NSLog(@"%s [DEBUG] jsonDict: %@", __PRETTY_FUNCTION__, jsonDict);

    NSError *error = nil;
    NSData *bodyData = [NSJSONSerialization dataWithJSONObject: jsonDict options: 0 error: &error];

    if (error != nil)
    {
        NSLog(@"%s ***** dataWithJson error: %@", __PRETTY_FUNCTION__, error);
        UnitySendMessage("_GameCenterManager_","IOSGameGameCenterVerifyFail",[[error localizedDescription] UTF8String]);
    }else{
        NSString *jsonStr = [[NSString alloc] initWithData:bodyData encoding:NSUTF8StringEncoding];
        // NSLog(@"json data:%s",[jsonStr UTF8String]);
        UnitySendMessage("_GameCenterManager_","IOSGameGameCenterVerifySuccess",[jsonStr UTF8String]);
    }

}
@end

@implementation GameCenterUserManager
extern "C"
{

    void CallFromUnity_GameCenterUserVerify()
    {
        NSLog(@"CallFromUnity_GameCenterUserVerify.");
        [GameCenterUserVerify Verify];
    }

}
@end

using UnityEngine;
using UnityEngine.SocialPlatforms;
using UnityEngine.SocialPlatforms.GameCenter;
using CodeStage.AntiCheat.ObscuredTypes;
using System.Runtime.InteropServices;
using MiniJSON;
using System.Collections.Generic;

public class GameCenterManager : MonoBehaviour
{

    #if UNITY_IOS
    [DllImport ("__Internal")]
    private static extern void CallFromUnity_GameCenterUserVerify();
    #endif

    private static GameCenterManager instance;
    private static object _lock=new object();
    private GameCenterManager(){}
    public static GameCenterManager GetInstance()
    {
        if(instance==null)
        {
            lock(_lock)
            {
                if(instance==null)
                {
                    var obj = new GameObject("_GameCenterManager_");
                    instance = obj.AddComponent<GameCenterManager>();
                }
            }
        }
        return instance;
    }

    private JDKUserModel userModel;
    private System.Action<bool> loginCallBack=null;

    public void Start()
    {
        Social.localUser.Authenticate(HandleAuthenticated);
    }

    public JDKUserModel GetUserModel(){
        return userModel;
    }

    public void Authenticate(System.Action<bool> callback){
        // if(Social.localUser.authenticated){
        //     callback(true);
        // }else{
            loginCallBack = callback;
            Start();
        // }
    }

    private void HandleAuthenticated(bool success)
    {
        Debug.Log("*** HandleAuthenticated: success = " + success);
        if(success)
        {
            string userInfo = "UserName:" + Social.localUser.userName +"\nUser ID:"+
                Social.localUser.id + " \nIsUnderage: "+ Social.localUser.underage;
            JDKLog.Log(userInfo);
            #if UNITY_IOS && !UNITY_EDITOR
                CallFromUnity_GameCenterUserVerify();
            #else
                if(loginCallBack!=null){
                    loginCallBack(false);
                    loginCallBack=null;
                }
            #endif
        }else{
            if(loginCallBack!=null){
                loginCallBack(false);
                loginCallBack=null;
            }
        }
    }

    public void IOSGameGameCenterVerifyFail(string errorMsg){
        JDKLog.LogError(errorMsg);
        if(loginCallBack!=null){
            loginCallBack(false);
            loginCallBack=null;
        }
    }

    public void IOSGameGameCenterVerifySuccess(string result){
        JDKLog.Log(result);
        var dict = (IDictionary<string,object>)Json.Deserialize(result);
        var data = (string)dict["data"];
        var puk = (string)dict["puk"];
        var sig = (string)dict["sig"];
        //现在可以发送 data/puk/sig 给服务器验证

        //我们是先存到一个用户模型，稍候(点击登录按钮后)再发送给服务器端验证
        //userModel = new JDKUserModel(Social.localUser.id,Social.localUser.userName,UserChannel.iOSGameCenter,null);
        //userModel.SetiOSGameCenterVerifyData(puk, sig, data);
        //if(loginCallBack!=null){
        //    loginCallBack(true);
        //    loginCallBack=null;
       // }
    }

}

服务器端我就把关键的验证方法贴出来吧：

from OpenSSL.crypto import verify
from OpenSSL.crypto import load_certificate
from OpenSSL.crypto import FILETYPE_ASN1
import base64

#cert_der对应客户端的puk指向的文件原文，注意客户端给的puk只是url，这里的cert_der需要传入这个url文件的内容，需要自己通过http获取url的文件
#signatureBase64 对应客户端给的sig原文
#dataBase64 对应客户端给的data原文
#user_id 是指客户端的Social.localUser.id，用在这里校验苹果这次签名的是不是这个用户id
def ios_gamecenter_user_verify(cert_der, signatureBase64, dataBase64,user_id):
    try:
        signature = base64.b64decode(signatureBase64)
        data = base64.b64decode(dataBase64)
        good_cert = load_certificate(FILETYPE_ASN1, cert_der) 
        verify(good_cert, signature, data, 'sha256')
        user_id=':%sc'%(user_id)
        return user_id in data
    except:
        return False    return True

文／fishg（简书作者）
原文链接：http://www.jianshu.com/p/66c23799af18
著作权归作者所有，转载请联系作者获得授权，并标注“简书作者”。