iOS游戏IAP数据服务器验证

我上一篇博客《为iOS应用/游戏内建购买项目（IAP）》对于CP有自己游戏服务器的从安全性来讲并不适用，有自己服务器则需要进一步对数据进行校验。

如果CP具有自己的游戏服务器， Apple建议在服务器端存储产品ID，而不要将其存储在客户端本地。 这样就可以在不升级程序的前提下添加新的产品，这只需要我们向客户端发送哪个产品的ID。

如果要申请商品ID，可参考《为iOS应用/游戏内建购买项目（IAP）》
更多详细流程可参考这篇文章：《Store Kit Guide(In App Purchase)翻译》

IAP充值数据校验流程如图：

而以下代码就是要实现上图数据校验流程的：

//
//  ViewController.m
//
//

#import "ViewController.h"


@interface ViewController ()

@end

@implementation ViewController

#pragma mark 数据初始化

- (void)viewDidLoad {
    [super viewDidLoad];

    //1
    [self setOnListner];


    UIButton * btn = [UIButton buttonWithType:UIButtonTypeRoundedRect];
    [btn setFrame:CGRectMake(100, 300, self.view.bounds.size.width/2, 50)];
    [btn setTitle:@"buy" forState:UIControlStateNormal];
    btn.backgroundColor = [UIColor purpleColor];
    [btn addTarget:self action:@selector(click) forControlEvents:UIControlEventTouchDown];

    [self.view addSubview:btn];

}

//1,对交易进行监听和设置可购买
-(void)setOnListner{

    [[SKPaymentQueue defaultQueue] addTransactionObserver:self];
    NSString * des;
    if([SKPaymentQueue canMakePayments]){
        des = @"可购买内置项目！";
    }else{
        des = @"不可购买内置项目！";
    }
    NSLog(@"%@",des);

}


-(void)click{
    [self reqBuyData];
}

//2，请求商品信息
-(void)reqBuyData{

    // 所注册的商品ID数组
    NSArray * arr = [[NSArray alloc] initWithObjects:@"com.xx.gold100",@"com.xx.gold200", nil];
    NSSet *set = [NSSet setWithArray:arr];
    SKProductsRequest * req = [[SKProductsRequest alloc] initWithProductIdentifiers:set];
    req.delegate = self;
    [req start];
}




#pragma mark SKProductsRequestDelegate代理实现

//3, 得到商品信息，并自动购买第一个
-(void)productsRequest:(SKProductsRequest *)request didReceiveResponse:(SKProductsResponse *)response{

    NSArray * myProducts = response.products;
    //如果是无效的商品将会出现在这里，如AppleID账号没完善银行信息之类也会导致
    NSArray * dArr = response.invalidProductIdentifiers;


    NSLog(@"接受到产品返回信息%lu", (unsigned long)myProducts.count);
    NSLog(@"接受到无效的产品返回信息%lu", (unsigned long)dArr.count);

    if(myProducts.count < 1){
        NSLog(@"无有效商品信息！");
        return;
    }

    SKProduct * buyProduct;
    for (SKProduct * product in myProducts) {
        NSLog(@"---pay : %@", product.localizedDescription);
        NSLog(@"product title:%@", product.localizedTitle);
        NSLog(@"price:%@", product.price);

        buyProduct = product;
    }
    //这里我直接对最后一个商品进行下单购买，
    // 游戏中应该把商品列表列出来给玩家选择，然后把要买的add到[SKPaymentQueue defaultQueue],到add这里开始发送购买请求
    SKPayment * pay = [SKPayment paymentWithProduct:buyProduct];
    [[SKPaymentQueue defaultQueue] addPayment:pay];

}

//SKProductsRequestDelegate代理实现，请求商品有错log
-(void)request:(SKRequest *)request didFailWithError:(NSError *)error{
    NSLog(@"---------error log----%@", error.localizedDescription);

}
//SKProductsRequestDelegate代理实现
-(void)requestDidFinish:(SKRequest *)request{
    NSLog(@"信息请求结束");
}






#pragma mark  SKPaymentTransactionObserver代理实现

//4，SKPaymentTransactionObserver代理实现，也就是购买的结果
-(void)paymentQueue:(SKPaymentQueue *)queue updatedTransactions:(NSArray *)transactions
{

    NSString * des = @"";

    for(SKPaymentTransaction * trans in transactions){

        switch (trans.transactionState) {
            case SKPaymentTransactionStatePurchased:

                des = @"客户端本地购买完成！将向服务器验证数据！";
                //购买成功，那么将要向cp游戏服务器发送订单，cp游戏服务器再去通过iap服务器验证数据，再返回结果到客户端
                //5,
                [self completeTransaction:trans];
                //pop出用过的交易
                [[SKPaymentQueue defaultQueue] finishTransaction:trans];
                break;

            case SKPaymentTransactionStateFailed:
                des = @"购买失败！";
                [self failedTransaction:trans];
                //pop出用过的交易
                [[SKPaymentQueue defaultQueue] finishTransaction:trans];
                break;

            case SKPaymentTransactionStateRestored:
                des = @"购买重复！";
                //pop出用过的交易
                [[SKPaymentQueue defaultQueue] finishTransaction:trans];
                break;

            case SKPaymentTransactionStatePurchasing:
                //des = @"购买ing！";
                break;
            default:
                break;
        }

        UIAlertView * a = [[UIAlertView alloc] initWithTitle:@"result" message:des delegate:self cancelButtonTitle:@"ok" otherButtonTitles:nil, nil];
        if (![des isEqual: @""]) {
            [a show];
        }

    }
}

#pragma mark 自定义的函数，由本地购买成功后验证数据和打印信息用

//5，购买成功后调用，
-(void)completeTransaction:(SKPaymentTransaction*) transaction{

    //模拟向游戏服务器验证数据
    [self verifyTransaction:transaction];


}


//6,
//假设以下函数是游戏服务器的
//这里应该交给游戏服务器去验证，然后把结果返回客户端，直接现在这里模拟游戏服务器吧
-(void)verifyTransaction:(SKPaymentTransaction*) transaction{

    //沙盒测试用url
    NSString * urlStr = @"https://sandbox.itunes.apple.com/verifyReceipt";
    NSURL * url = [NSURL URLWithString:urlStr];

    NSMutableURLRequest * req = [NSMutableURLRequest  requestWithURL:url cachePolicy:NSURLRequestUseProtocolCachePolicy
                                                    timeoutInterval:5000];
    req.HTTPMethod = @"POST";

    //要求Base64编码
    NSString * transactionReceipt = [transaction.transactionReceipt base64EncodedStringWithOptions:NSDataBase64EncodingEndLineWithLineFeed];
    NSString * jsonStr = [NSString stringWithFormat:@"{\"receipt-data\":\"%@\"}", transactionReceipt];
    NSData  * jsonData = [jsonStr dataUsingEncoding:NSUTF8StringEncoding allowLossyConversion:YES];

    [req setHTTPBody:jsonData];

    NSData * result = [NSURLConnection sendSynchronousRequest:req returningResponse:nil error:nil];


    //这个验证函数里应该是服务器的，得到下面结果后返回给本客户端就OK啦
    if (result == nil) {
        NSLog(@"验证到有误数据");
    }else{
        NSDictionary * dic = [NSJSONSerialization JSONObjectWithData:result options:NSJSONReadingAllowFragments error:nil];

        /*应该返回的json
        receipt =     {
                .......
         };
         status = 0;
         */
        //status ＝＝ 0 才算成功
        if (dic!= nil && [dic[@"status"] == 0]) {
            NSLog(@"数据验证成功！购买成功！");
            NSLog(@"返回数据：");
            NSLog(@"%@",dic);

        }else{
            NSLog(@"验证到有误数据");
            if (dic != nil) {
                NSLog(@"%@", dic);
            }
        }
    }

}

//给交易失败后调用
-(void)failedTransaction:(SKPaymentTransaction*)transaction{

    NSString * errorDes;
    NSInteger errorCode = transaction.error.code;

    NSLog(@"payment error ; %@", transaction.error.localizedDescription);

    switch (errorCode) {
        case SKErrorUnknown:
            errorDes = @"unknown";
            break;
        case SKErrorPaymentCancelled:
            errorDes = @"payment cancel";
            break;
        case SKErrorPaymentInvalid:
            errorDes = @"payment invalid";
            break;
        case SKErrorPaymentNotAllowed:
            errorDes = @"not allowed";
            break;
        case SKErrorClientInvalid:
            errorDes = @"client invalid";
            break;
        default:
            break;
    }
    UIAlertView * alert = [[UIAlertView alloc] initWithTitle:@"title" message:errorDes delegate:self cancelButtonTitle:@"ok" otherButtonTitles:nil, nil];
    [alert show];
}


@end

运行就可以得到结果了：

查看打印数据：