Real Software Forums

The forum for Real Studio and other Real Software products.
[ REAL Software Website | Board Index ]
It is currently Wed Oct 22, 2014 2:57 am
xojo

All times are UTC - 5 hours




Post new topic Reply to topic  [ 21 posts ]  Go to page Previous  1, 2
Author Message
 Post subject: Re: Mac App Store Submission and Receipt Validation
PostPosted: Sat Nov 27, 2010 3:43 pm 
Offline
User avatar

Joined: Wed May 10, 2006 2:42 pm
Posts: 2985
Location: Germany
Well, I made myself a module with the sample code from Apple to check this receipt, but I think on the long run I'll translate it to pure REALbasic code.

Why is Bob's signature funny?

Greetings
Christian

_________________
See you in Orlando, Florida for Real World 2013
More details and registration here:
http://www.realsoftware.com/community/realworld.php


Top
 Profile  
 
 Post subject: Re: Mac App Store Submission and Receipt Validation
PostPosted: Sat Nov 27, 2010 3:48 pm 
Offline
User avatar

Joined: Sun Mar 23, 2008 3:30 pm
Posts: 163
MonkeybreadSoftware wrote:
Why is Bob's signature funny?


It says see you in 2001.


Top
 Profile  
 
 Post subject: Re: Mac App Store Submission and Receipt Validation
PostPosted: Thu Dec 09, 2010 11:31 pm 
Offline
User avatar

Joined: Sun Mar 23, 2008 3:30 pm
Posts: 163
Thanks again to Charle's receipt validation plugin it works really nicely and was super easy.


Top
 Profile  
 
 Post subject: Re: Mac App Store Submission and Receipt Validation
PostPosted: Fri Jan 07, 2011 9:56 am 
Offline

Joined: Mon Nov 26, 2007 1:37 pm
Posts: 83
sethev wrote:
Charles Yeomans wrote some code in RB to do the receipt validation.

You can get it from:
http://macoslib.googlecode.com/svn/trunk/

There's a lot of other code in the project, but the code of interest is self-contained in the CertTools module.

Curious is anyone knows if this code checks that the receipt bundle identifier matches the value for CFBundleIdentifier in the Info.plist file?

Apparently it is very easy to hack App Store applications if the correct code is not used.

Link: http://www.craftymind.com/2011/01/06/mac-app-store-hacked-how-developers-can-better-protect-themselves/


Top
 Profile  
 
 Post subject: Re: Mac App Store Submission and Receipt Validation
PostPosted: Fri Jan 07, 2011 10:09 am 
Offline
User avatar

Joined: Sun Mar 23, 2008 3:30 pm
Posts: 163
I was wondering this also, although, a secondary hack is to change the plist file's own bundle identifier. It looked through the code and could not find any comparison with the bundle identifier (from the plist file or elsewhere) but it DOES read the bundle identifier from the receipt.

It would be best to hardcode the bundle identifier as a constant.


Top
 Profile  
 
 Post subject: Re: Mac App Store Submission and Receipt Validation
PostPosted: Fri Feb 04, 2011 6:06 pm 
Offline

Joined: Thu Jul 13, 2006 11:20 am
Posts: 114
ChickenScratch wrote:
@Charles Yeoman: thank you for the receipt verification module, it worked beautifully. I tested it in the Apple iTunes connect sandbox and it works great. My test app returned 173 as required, went and grabbed a receipt from the sandbox and worked great after that.


Actually, you should thank Thomas Tempelmann; it is his code. I wrote some little bit of something, but it was his work.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 21 posts ]  Go to page Previous  1, 2

All times are UTC - 5 hours


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group