iap_verifier 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA1:
+  metadata.gz: b3c46ebc360b35276b2ef9a7d66f55e38a5a999d
+  data.tar.gz: 8888b7705e0a972d34571b50b676c3fd8e92000c
+SHA512:
+  metadata.gz: d9cb9d90072e7f2319d368b4fd1a0e17e20133338caa61ad97e52102be1d6e8838e3082faeb98805e06754e549041014fe6d6608f5e5868e5d606f6e278b7c1f
+  data.tar.gz: 3ce5852c0950034c91bb9e69250a4fd3b36ffeea0f4fafded4bff20dca00683b7b6594747693ec1ff62b704a5fc9a60e7c3d9351d66c33fc9c89f2c312ea7b7c

data/.gitignore

@@ -0,0 +1,22 @@
+*.gem
+*.rbc
+.bundle
+.config
+.yardoc
+Gemfile.lock
+InstalledFiles
+_yardoc
+coverage
+doc/
+lib/bundler/man
+pkg
+rdoc
+spec/reports
+test/tmp
+test/version_tmp
+tmp
+*.bundle
+*.so
+*.o
+*.a
+mkmf.log

data/.travis.yml

@@ -0,0 +1,5 @@
+language: ruby
+rvm:
+  - head
+  - 2.1.2
+  - rbx-2.1.1

data/CHANGELOG.md

@@ -0,0 +1,7 @@
+# CHANGELOG
+
+## master
+
+## v0.0.1
+
+Initial release.

data/Gemfile

@@ -0,0 +1,4 @@
+source 'https://rubygems.org'
+
+# Specify your gem's dependencies in iap_verifier.gemspec
+gemspec

data/LICENSE.txt

@@ -0,0 +1,22 @@
+Copyright (c) 2014 Jun Lin
+
+MIT License
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,33 @@
+# IAPVerifier
+
+In-App Purchase receipt verification.
+
+## Installation
+
+Add this line to your application's Gemfile:
+
+    gem 'iap_verifier'
+
+And then execute:
+
+    $ bundle
+
+Or install it yourself as:
+
+    $ gem install iap_verifier
+
+## Usage
+
+```ruby
+receipt = IAPVerifier.verify_receipt(receipt: 'base64_encoded_receipt_string')
+receipt.original_application_version # 1234
+receipt.original_purchase_date_pst # 2014-08-31 11:24:13 America/Los_Angeles
+```
+
+## Contributing
+
+1. Fork it ( https://github.com/linjunpop/iap_verifier/fork )
+2. Create your feature branch (`git checkout -b my-new-feature`)
+3. Commit your changes (`git commit -am 'Add some feature'`)
+4. Push to the branch (`git push origin my-new-feature`)
+5. Create a new Pull Request

data/Rakefile

@@ -0,0 +1,10 @@
+require "bundler/gem_tasks"
+
+require "rake/testtask"
+
+Rake::TestTask.new do |t|
+  t.libs << "test" # here is the test_helper
+  t.test_files = FileList['test/*_test.rb']
+end
+
+task default: :test

data/iap_verifier.gemspec

@@ -0,0 +1,28 @@
+# coding: utf-8
+lib = File.expand_path('../lib', __FILE__)
+$LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
+require 'iap_verifier/version'
+
+Gem::Specification.new do |spec|
+  spec.name          = "iap_verifier"
+  spec.version       = IAPVerifier::VERSION
+  spec.authors       = ["Jun Lin"]
+  spec.email         = ["linjunpop@gmail.com"]
+  spec.summary       = %q{In-App Purchase receipt verification.}
+  spec.description   = %q{In-App Purchase receipt verification.}
+  spec.homepage      = ""
+  spec.license       = "MIT"
+
+  spec.files         = `git ls-files -z`.split("\x0")
+  spec.executables   = spec.files.grep(%r{^bin/}) { |f| File.basename(f) }
+  spec.test_files    = spec.files.grep(%r{^(test|spec|features)/})
+  spec.require_paths = ["lib"]
+
+  spec.add_development_dependency "bundler", "~> 1.6"
+  spec.add_development_dependency "rake"
+  spec.add_development_dependency "pry"
+  spec.add_development_dependency "mocha"
+  spec.add_development_dependency "minitest-reporters"
+  spec.add_development_dependency "webmock"
+  spec.add_development_dependency "vcr"
+end

data/lib/iap_verifier/error.rb

@@ -0,0 +1,55 @@
+module IAPVerifier
+  module Error
+    class Standard < StandardError; end
+
+    class EmptyReceipt < Standard
+      def message
+        'Receipt cannot be empty.'
+      end
+    end
+
+    class NetworkDown < Standard
+      def initialize(response)
+        @response = response
+      end
+
+      def message
+        "Server returns unexpected code: #{@response.code}."
+      end
+    end
+
+    class MalformedReceiptData < Standard
+      def initialize(data)
+        @data = data
+      end
+
+      def message
+        "Malformed Receipt data: #{@data}"
+      end
+    end
+
+    class InvalidResponseData < Standard
+      MESSAGES = {
+        21000 => "App store could not read",
+        21002 => "Data was malformed",
+        21003 => "Receipt not authenticated",
+        21004 => "Shared secret does not match",
+        21005 => "Receipt server unavailable",
+        21006 => "Receipt valid but sub expired",
+        21007 => "Sandbox receipt sent to Production environment",
+        21008 => "Production receipt sent to Sandbox environment"
+      }
+
+      def initialize(code)
+        @code = code
+      end
+
+      def message
+        {
+          error_code: @code,
+          message: MESSAGES.fetch(@code, 'Unknown error code')
+        }
+      end
+    end
+  end
+end

data/lib/iap_verifier/receipt.rb

@@ -0,0 +1,19 @@
+module IAPVerifier
+  class Receipt
+    def initialize(response_data)
+      @receipt_data = response_data['receipt']
+
+      unless @receipt_data.is_a?(Hash)
+        raise Error::MalformedReceiptData
+      end
+
+      @receipt_data.each do |key, value|
+        define_singleton_method key.to_s, -> { value }
+      end
+    end
+
+    def to_h
+      @receipt_data
+    end
+  end
+end

data/lib/iap_verifier/request.rb

@@ -0,0 +1,54 @@
+require 'json'
+require 'net/https'
+require 'uri'
+
+module IAPVerifier
+  class Request
+    PRODUCTION_URL = "https://buy.itunes.apple.com/verifyReceipt"
+    SANDBOX_URL = "https://sandbox.itunes.apple.com/verifyReceipt"
+
+    def initialize(receipt:)
+      @request_data = RequestData.new(receipt)
+      unless receipt.length > 0
+        raise Error::EmptyReceipt.new
+      end
+    end
+
+    def response
+      verify_with_retry(@request_data)
+    end
+
+    private
+
+    def verify_with_retry(request_data)
+      response_data = verify(request_data, PRODUCTION_URL)
+
+      if response_data.sandbox?
+        response_data = verify(request_data, SANDBOX_URL)
+      end
+
+      response_data
+    end
+
+    def verify(request_data, url)
+      uri = URI(url)
+      http = Net::HTTP.new(uri.host, uri.port)
+
+      http.use_ssl = true
+      http.verify_mode = OpenSSL::SSL::VERIFY_PEER
+
+      request = Net::HTTP::Post.new(uri.request_uri)
+      request['Content-Type'] = "application/json"
+      request['Accept'] = "application/json"
+      request.body = request_data.to_json
+
+      response = http.request(request)
+
+      if response.instance_of?(Net::HTTPOK)
+        ResponseData.new(JSON.parse(response.body))
+      else
+        raise Error::NetworkDown.new(response)
+      end
+    end
+  end
+end

data/lib/iap_verifier/request_data.rb

@@ -0,0 +1,17 @@
+module IAPVerifier
+  class RequestData
+    def initialize(receipt)
+      @receipt = receipt
+    end
+
+    def to_h
+      {
+        'receipt-data' => @receipt
+      }
+    end
+
+    def to_json
+      to_h.to_json
+    end
+  end
+end

data/lib/iap_verifier/response_data.rb

@@ -0,0 +1,32 @@
+module IAPVerifier
+  class ResponseData
+    SUCCESS_RESPONSE_CODE = 0
+    SANDBOX_RECEIPT_CODE = 21007
+
+    def initialize(response_data)
+      @response_data = response_data
+    end
+
+    def valid?
+      status_code == SUCCESS_RESPONSE_CODE
+    end
+
+    def sandbox?
+      status_code == SANDBOX_RECEIPT_CODE
+    end
+
+    def receipt
+      if valid?
+        Receipt.new(@response_data)
+      else
+        raise Error::InvalidResponseData.new(status_code)
+      end
+    end
+
+    private
+
+    def status_code
+      @response_data['status']
+    end
+  end
+end

data/lib/iap_verifier/version.rb

@@ -0,0 +1,3 @@
+module IAPVerifier
+  VERSION = "0.0.1"
+end

data/lib/iap_verifier.rb

@@ -0,0 +1,22 @@
+require "iap_verifier/version"
+require 'iap_verifier/error'
+require 'iap_verifier/request'
+require 'iap_verifier/request_data'
+require 'iap_verifier/response_data'
+require 'iap_verifier/receipt'
+
+module IAPVerifier
+  class << self
+    def verify_receipt!(receipt:)
+      IAPVerifier::Request.new(receipt: receipt).response.receipt
+    end
+
+    def verify_receipt(receipt:)
+      begin
+        verify_receipt!(receipt: receipt)
+      rescue IAPVerifier::Error::Standard
+        return nil
+      end
+    end
+  end
+end

data/test/fixtures/base64_receipt

@@ -0,0 +1 @@
+ewoJInNpZ25hdHVyZSIgPSAiQXBNVUJDODZBbHpOaWtWNVl0clpBTWlKUWJLOEVkZVhrNjNrV0JBWHpsQzhkWEd1anE0N1puSVlLb0ZFMW9OL0ZTOGNYbEZmcDlZWHQ5aU1CZEwyNTBsUlJtaU5HYnloaXRyeVlWQVFvcmkzMlc5YVIwVDhML2FZVkJkZlcrT3kvUXlQWkVtb05LeGhudDJXTlNVRG9VaFo4Wis0cFA3MHBlNWtVUWxiZElWaEFBQURWekNDQTFNd2dnSTdvQU1DQVFJQ0NHVVVrVTNaV0FTMU1BMEdDU3FHU0liM0RRRUJCUVVBTUg4eEN6QUpCZ05WQkFZVEFsVlRNUk13RVFZRFZRUUtEQXBCY0hCc1pTQkpibU11TVNZd0pBWURWUVFMREIxQmNIQnNaU0JEWlhKMGFXWnBZMkYwYVc5dUlFRjFkR2h2Y21sMGVURXpNREVHQTFVRUF3d3FRWEJ3YkdVZ2FWUjFibVZ6SUZOMGIzSmxJRU5sY25ScFptbGpZWFJwYjI0Z1FYVjBhRzl5YVhSNU1CNFhEVEE1TURZeE5USXlNRFUxTmxvWERURTBNRFl4TkRJeU1EVTFObG93WkRFak1DRUdBMVVFQXd3YVVIVnlZMmhoYzJWU1pXTmxhWEIwUTJWeWRHbG1hV05oZEdVeEd6QVpCZ05WQkFzTUVrRndjR3hsSUdsVWRXNWxjeUJUZEc5eVpURVRNQkVHQTFVRUNnd0tRWEJ3YkdVZ1NXNWpMakVMTUFrR0ExVUVCaE1DVlZNd2daOHdEUVlKS29aSWh2Y05BUUVCQlFBRGdZMEFNSUdKQW9HQkFNclJqRjJjdDRJclNkaVRDaGFJMGc4cHd2L2NtSHM4cC9Sd1YvcnQvOTFYS1ZoTmw0WElCaW1LalFRTmZnSHNEczZ5anUrK0RyS0pFN3VLc3BoTWRkS1lmRkU1ckdYc0FkQkVqQndSSXhleFRldngzSExFRkdBdDFtb0t4NTA5ZGh4dGlJZERnSnYyWWFWczQ5QjB1SnZOZHk2U01xTk5MSHNETHpEUzlvWkhBZ01CQUFHamNqQndNQXdHQTFVZEV3RUIvd1FDTUFBd0h3WURWUjBqQkJnd0ZvQVVOaDNvNHAyQzBnRVl0VEpyRHRkREM1RllRem93RGdZRFZSMFBBUUgvQkFRREFnZUFNQjBHQTFVZERnUVdCQlNwZzRQeUdVakZQaEpYQ0JUTXphTittVjhrOVRBUUJnb3Foa2lHOTJOa0JnVUJCQUlGQURBTkJna3Foa2lHOXcwQkFRVUZBQU9DQVFFQUVhU2JQanRtTjRDL0lCM1FFcEszMlJ4YWNDRFhkVlhBZVZSZVM1RmFaeGMrdDg4cFFQOTNCaUF4dmRXLzNlVFNNR1k1RmJlQVlMM2V0cVA1Z204d3JGb2pYMGlreVZSU3RRKy9BUTBLRWp0cUIwN2tMczlRVWU4Y3pSOFVHZmRNMUV1bVYvVWd2RGQ0TndOWXhMUU1nNFdUUWZna1FRVnk4R1had1ZIZ2JFL1VDNlk3MDUzcEdYQms1MU5QTTN3b3hoZDNnU1JMdlhqK2xvSHNTdGNURXFlOXBCRHBtRzUrc2s0dHcrR0szR01lRU41LytlMVFUOW5wL0tsMW5qK2FCdzdDMHhzeTBiRm5hQWQxY1NTNnhkb3J5L0NVdk02Z3RLc21uT09kcVRlc2JwMGJzOHNuNldxczBDOWRnY3hSSHVPTVoydG04bnBMVW03YXJnT1N6UT09IjsKCSJwdXJjaGFzZS1pbmZvIiA9ICJld29KSW05eWFXZHBibUZzTFhCMWNtTm9ZWE5sTFdSaGRHVXRjSE4wSWlBOUlDSXlNREV5TFRBMExUTXdJREE0T2pBMU9qVTFJRUZ0WlhKcFkyRXZURzl6WDBGdVoyVnNaWE1pT3dvSkltOXlhV2RwYm1Gc0xYUnlZVzV6WVdOMGFXOXVMV2xrSWlBOUlDSXhNREF3TURBd01EUTJNVGM0T0RFM0lqc0tDU0ppZG5KeklpQTlJQ0l5TURFeU1EUXlOeUk3Q2draWRISmhibk5oWTNScGIyNHRhV1FpSUQwZ0lqRXdNREF3TURBd05EWXhOemc0TVRjaU93b0pJbkYxWVc1MGFYUjVJaUE5SUNJeElqc0tDU0p2Y21sbmFXNWhiQzF3ZFhKamFHRnpaUzFrWVhSbExXMXpJaUE5SUNJeE16TTFOems0TXpVMU9EWTRJanNLQ1NKd2NtOWtkV04wTFdsa0lpQTlJQ0pqYjIwdWJXbHVaRzF2WW1Gd2NDNWtiM2R1Ykc5aFpDSTdDZ2tpYVhSbGJTMXBaQ0lnUFNBaU5USXhNVEk1T0RFeUlqc0tDU0ppYVdRaUlEMGdJbU52YlM1dGFXNWtiVzlpWVhCd0xrMXBibVJOYjJJaU93b0pJbkIxY21Ob1lYTmxMV1JoZEdVdGJYTWlJRDBnSWpFek16VTNPVGd6TlRVNE5qZ2lPd29KSW5CMWNtTm9ZWE5sTFdSaGRHVWlJRDBnSWpJd01USXRNRFF0TXpBZ01UVTZNRFU2TlRVZ1JYUmpMMGROVkNJN0Nna2ljSFZ5WTJoaGMyVXRaR0YwWlMxd2MzUWlJRDBnSWpJd01USXRNRFF0TXpBZ01EZzZNRFU2TlRVZ1FXMWxjbWxqWVM5TWIzTmZRVzVuWld4bGN5STdDZ2tpYjNKcFoybHVZV3d0Y0hWeVkyaGhjMlV0WkdGMFpTSWdQU0FpTWpBeE1pMHdOQzB6TUNBeE5Ub3dOVG8xTlNCRmRHTXZSMDFVSWpzS2ZRPT0iOwoJImVudmlyb25tZW50IiA9ICJTYW5kYm94IjsKCSJwb2QiID0gIjEwMCI7Cgkic2lnbmluZy1zdGF0dXMiID0gIjAiOwp9

data/test/fixtures/vcr_cassettes/valid_receipt.yml

@@ -0,0 +1,150 @@
+---
+http_interactions:
+- request:
+    method: post
+    uri: https://buy.itunes.apple.com/verifyReceipt
+    body:
+      encoding: UTF-8
+      string: '{"receipt-data":"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"}'
+    headers:
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Accept:
+      - application/json
+      User-Agent:
+      - Ruby
+      Content-Type:
+      - application/json
+  response:
+    status:
+      code: 200
+      message: Apple WebObjects
+    headers:
+      X-Apple-Jingle-Correlation-Key:
+      - 2YZEYGN63OI7E
+      Pod:
+      - '53'
+      X-Apple-Translated-Wo-Url:
+      - "/WebObjects/MZFinance.woa/wa/verifyReceipt"
+      X-Apple-Orig-Url:
+      - http://buy.itunes.apple.com/WebObjects/MZFinance.woa/wa/verifyReceipt
+      X-Apple-Application-Site:
+      - ST13
+      Edge-Control:
+      - cache-maxage=0
+      - no-store
+      Date:
+      - Mon, 01 Sep 2014 23:29:26 GMT
+      Set-Cookie:
+      - NSC_nagjobodf-bopo-qppm*0=ffffffff12a5a8e645525d5f4f58455e445a4a423660;path=/;secure;httponly
+      - Pod=53; version="1"; expires=Wed, 01-Oct-2014 23:29:26 GMT; path=/; domain=.apple.com
+      - itspod=53; version="1"; expires=Wed, 01-Oct-2014 23:29:26 GMT; path=/; domain=.apple.com
+      - mzf_dr=0; version="1"; expires=Thu, 01-Jan-1970 00:00:00 GMT; path=/WebObjects;
+        domain=.apple.com
+      - mzf_in=532400; version="1"; path=/WebObjects; domain=.apple.com; secure
+      - ns-mzf-inst=182-247-80-217-23-8155-532400-53-st13; version=1; Max-Age=1800;
+        path=/; domain=.apple.com; httponly
+      Apple-Timing-App:
+      - 533 ms
+      Cache-Control:
+      - max-age=0
+      - must-revalidate
+      - no-cache
+      - no-store
+      - no-transform
+      - private
+      Expires:
+      - Mon, 01 Sep 2014 23:29:26 GMT
+      X-Apple-Lokamai-No-Cache:
+      - 'true'
+      X-Apple-Application-Instance:
+      - '532400'
+      X-Frame-Options:
+      - SAMEORIGIN
+      Itspod:
+      - '53'
+      X-Webobjects-Loadaverage:
+      - '24'
+      Connection:
+      - keep-alive
+      Content-Length:
+      - '36'
+    body:
+      encoding: UTF-8
+      string: '{"status":21007}'
+    http_version: 
+  recorded_at: Mon, 01 Sep 2014 23:29:26 GMT
+- request:
+    method: post
+    uri: https://sandbox.itunes.apple.com/verifyReceipt
+    body:
+      encoding: UTF-8
+      string: '{"receipt-data":"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"}'
+    headers:
+      Accept-Encoding:
+      - gzip;q=1.0,deflate;q=0.6,identity;q=0.3
+      Accept:
+      - application/json
+      User-Agent:
+      - Ruby
+      Content-Type:
+      - application/json
+  response:
+    status:
+      code: 200
+      message: Apple WebObjects
+    headers:
+      X-Apple-Jingle-Correlation-Key:
+      - I7RNKZTLOR2JI
+      Pod:
+      - '100'
+      X-Apple-Translated-Wo-Url:
+      - "/WebObjects/MZFinance.woa/wa/verifyReceipt"
+      X-Apple-Orig-Url:
+      - http://sandbox.itunes.apple.com/WebObjects/MZFinance.woa/wa/verifyReceipt
+      X-Apple-Application-Site:
+      - SB
+      Edge-Control:
+      - cache-maxage=0
+      - no-store
+      Set-Cookie:
+      - Pod=100; version="1"; expires=Wed, 01-Oct-2014 23:29:27 GMT; path=/; domain=.apple.com
+      - itspod=100; version="1"; expires=Wed, 01-Oct-2014 23:29:27 GMT; path=/; domain=.apple.com
+      - mzf_dr=0; version="1"; expires=Thu, 01-Jan-1970 00:00:00 GMT; path=/WebObjects;
+        domain=.apple.com
+      - mzf_in=990140; version="1"; path=/WebObjects; domain=.apple.com; secure
+      Apple-Timing-App:
+      - 11 ms
+      Cache-Control:
+      - max-age=0
+      - must-revalidate
+      - no-cache
+      - no-store
+      - no-transform
+      - private
+      Expires:
+      - Mon, 01 Sep 2014 23:29:27 GMT
+      X-Apple-Lokamai-No-Cache:
+      - 'true'
+      X-Apple-Application-Instance:
+      - '990140'
+      X-Frame-Options:
+      - SAMEORIGIN
+      Itspod:
+      - '100'
+      X-Webobjects-Loadaverage:
+      - '0'
+      Connection:
+      - keep-alive
+      Content-Length:
+      - '259'
+      Date:
+      - Mon, 01 Sep 2014 23:29:27 GMT
+    body:
+      encoding: UTF-8
+      string: |-
+        {
+        "receipt":{"original_purchase_date_pst":"2012-04-30 08:05:55 America/Los_Angeles", "original_transaction_id":"1000000046178817", "original_purchase_date_ms":"1335798355868", "transaction_id":"1000000046178817", "quantity":"1", "product_id":"com.mindmobapp.download", "bvrs":"20120427", "purchase_date_ms":"1335798355868", "purchase_date":"2012-04-30 15:05:55 Etc/GMT", "original_purchase_date":"2012-04-30 15:05:55 Etc/GMT", "purchase_date_pst":"2012-04-30 08:05:55 America/Los_Angeles", "bid":"com.mindmobapp.MindMob", "item_id":"521129812"}, "status":0}
+    http_version: 
+  recorded_at: Mon, 01 Sep 2014 23:29:27 GMT
+recorded_with: VCR 2.9.2

data/test/receipt_test.rb

@@ -0,0 +1,13 @@
+require 'test_helper'
+require 'iap_verifier/receipt'
+
+class ReceiptTest < MiniTest::Test
+  def test_method_missing
+    receipt = IAPVerifier::Receipt.new({ 'receipt' => { 'foo' => 'bar' } })
+
+    assert_equal 'bar', receipt.foo
+    assert_raises(NoMethodError) do
+      receipt.bar
+    end
+  end
+end

data/test/request_data_test.rb

@@ -0,0 +1,13 @@
+require 'test_helper'
+require 'iap_verifier/request_data'
+
+class RequestDataTest < MiniTest::Test
+  def test_base64_receipt
+    receipt = File.read(File.expand_path("../fixtures/base64_receipt", __FILE__)).chop
+
+    expected = {
+      'receipt-data' => receipt
+    }
+    assert_equal expected, IAPVerifier::RequestData.new(receipt).to_h
+  end
+end

data/test/request_test.rb

@@ -0,0 +1,19 @@
+require 'test_helper'
+require 'iap_verifier/request'
+
+class RequestTest < MiniTest::Test
+  def test_empty_receipt
+    assert_raises(IAPVerifier::Error::EmptyReceipt) do
+      IAPVerifier::Request.new(receipt: '')
+    end
+  end
+
+  def test_response
+    VCR.use_cassette('valid_receipt') do
+      receipt = File.read(File.expand_path("../fixtures/base64_receipt", __FILE__)).chop
+      response_data = IAPVerifier::Request.new(receipt: receipt).response
+
+      assert_equal true, response_data.valid?
+    end
+  end
+end

data/test/response_data_test.rb

@@ -0,0 +1,45 @@
+require 'test_helper'
+require 'iap_verifier/response_data'
+require 'iap_verifier/receipt'
+require 'iap_verifier/error'
+
+class ResponseDataTest < MiniTest::Test
+  def test_success_response_json
+    success_response_json = { 'status' => 0, 'receipt' => { } }
+    response_data = IAPVerifier::ResponseData.new(success_response_json)
+
+    assert_equal true, response_data.valid?
+  end
+
+  def test_error_response_json
+    error_response_json = { 'status' => 21002 }
+    response_data = IAPVerifier::ResponseData.new(error_response_json)
+
+    assert_equal false, response_data.valid?
+  end
+
+  def test_sandbox_response_json
+    # sandbox receipt sent to production server
+    sandbox_response_json = { 'status' => 21007 }
+    response_data = IAPVerifier::ResponseData.new(sandbox_response_json)
+
+    assert_equal false, response_data.valid?
+    assert_equal true, response_data.sandbox?
+  end
+
+  def test_receipt
+    response_data = IAPVerifier::ResponseData.new({ 'receipt' => { } })
+    response_data.stubs(:valid?).returns(true)
+
+    assert_equal true, response_data.receipt.instance_of?(IAPVerifier::Receipt)
+  end
+
+  def test_invalid_response_data
+    assert_raises(IAPVerifier::Error::InvalidResponseData) do
+      response_data = IAPVerifier::ResponseData.new({ 'receipt' => { } })
+      response_data.stubs(:valid?).returns(false)
+
+      response_data.receipt
+    end
+  end
+end

data/test/test_helper.rb

@@ -0,0 +1,12 @@
+require 'minitest/autorun'
+require "minitest/reporters"
+require 'mocha/mini_test'
+require 'webmock/minitest'
+require 'vcr'
+
+Minitest::Reporters.use!
+
+VCR.configure do |c|
+  c.cassette_library_dir = File.expand_path( '../fixtures/vcr_cassettes', __FILE__)
+  c.hook_into :webmock # or :fakeweb
+end

metadata

@@ -0,0 +1,171 @@
+--- !ruby/object:Gem::Specification
+name: iap_verifier
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- Jun Lin
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2014-09-01 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: bundler
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '1.6'
+- !ruby/object:Gem::Dependency
+  name: rake
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: pry
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: mocha
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: minitest-reporters
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+- !ruby/object:Gem::Dependency
+  name: vcr
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+description: In-App Purchase receipt verification.
+email:
+- linjunpop@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".gitignore"
+- ".travis.yml"
+- CHANGELOG.md
+- Gemfile
+- LICENSE.txt
+- README.md
+- Rakefile
+- iap_verifier.gemspec
+- lib/iap_verifier.rb
+- lib/iap_verifier/error.rb
+- lib/iap_verifier/receipt.rb
+- lib/iap_verifier/request.rb
+- lib/iap_verifier/request_data.rb
+- lib/iap_verifier/response_data.rb
+- lib/iap_verifier/version.rb
+- test/fixtures/base64_receipt
+- test/fixtures/vcr_cassettes/valid_receipt.yml
+- test/receipt_test.rb
+- test/request_data_test.rb
+- test/request_test.rb
+- test/response_data_test.rb
+- test/test_helper.rb
+homepage: ''
+licenses:
+- MIT
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: 
+rubygems_version: 2.2.2
+signing_key: 
+specification_version: 4
+summary: In-App Purchase receipt verification.
+test_files:
+- test/fixtures/base64_receipt
+- test/fixtures/vcr_cassettes/valid_receipt.yml
+- test/receipt_test.rb
+- test/request_data_test.rb
+- test/request_test.rb
+- test/response_data_test.rb
+- test/test_helper.rb