imobile 0.0.1

data/CHANGELOG

@@ -0,0 +1 @@
+v0.0.1. Initial release. In-App Purchase receipt validation.

data/LICENSE

@@ -0,0 +1,21 @@
+The MIT License
+
+Copyright (c) 2009 Zergling.Net
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.

data/Manifest

@@ -0,0 +1,10 @@
+CHANGELOG
+lib/imobile/validate_receipt.rb
+lib/imobile.rb
+LICENSE
+Manifest
+Rakefile
+README
+test/validate_receipt_test.rb
+testdata/forged_sandbox_receipt
+testdata/valid_sandbox_receipt

data/README

@@ -0,0 +1,6 @@
+This gem/Rails plugin contains common code for powering iPhone applications. It
+is particularly suitable as a server-side partner to the ZergSupport toolkit,
+also available on Github under the MIT license at
+http://github.com/costan/zergsupport
+
+ 

data/Rakefile

@@ -0,0 +1,22 @@
+require 'rubygems'
+require 'echoe'
+
+Echoe.new('imobile') do |p|
+  p.project = 'zerglings' # rubyforge project
+  
+  p.author = 'Victor Costan'
+  p.email = 'victor@zergling.net'
+  p.summary = 'Library for servers backing iPhone applications.'
+  p.url = 'http://github.com/costan/imobile'
+  p.dependencies = ['json >=1.1.7']
+  p.development_dependencies = ["echoe >=3.1.1", "flexmock >=0.8.6"]
+  
+  p.need_tar_gz = true
+  p.need_zip = true
+  p.rdoc_pattern = /^(lib|bin|tasks|ext)|^BUILD|^README|^CHANGELOG|^TODO|^LICENSE|^COPYING$/  
+end
+
+if $0 == __FILE__
+  Rake.application = Rake::Application.new
+  Rake.application.run
+end

data/imobile.gemspec

@@ -0,0 +1,40 @@
+# -*- encoding: utf-8 -*-
+
+Gem::Specification.new do |s|
+  s.name = %q{imobile}
+  s.version = "0.0.1"
+
+  s.required_rubygems_version = Gem::Requirement.new(">= 1.2") if s.respond_to? :required_rubygems_version=
+  s.authors = ["Victor Costan"]
+  s.date = %q{2009-07-23}
+  s.description = %q{Library for servers backing iPhone applications.}
+  s.email = %q{victor@zergling.net}
+  s.extra_rdoc_files = ["CHANGELOG", "lib/imobile/validate_receipt.rb", "lib/imobile.rb", "LICENSE", "README"]
+  s.files = ["CHANGELOG", "lib/imobile/validate_receipt.rb", "lib/imobile.rb", "LICENSE", "Manifest", "Rakefile", "README", "test/validate_receipt_test.rb", "testdata/forged_sandbox_receipt", "testdata/valid_sandbox_receipt", "imobile.gemspec"]
+  s.homepage = %q{http://github.com/costan/imobile}
+  s.rdoc_options = ["--line-numbers", "--inline-source", "--title", "Imobile", "--main", "README"]
+  s.require_paths = ["lib"]
+  s.rubyforge_project = %q{zerglings}
+  s.rubygems_version = %q{1.3.5}
+  s.summary = %q{Library for servers backing iPhone applications.}
+  s.test_files = ["test/validate_receipt_test.rb"]
+
+  if s.respond_to? :specification_version then
+    current_version = Gem::Specification::CURRENT_SPECIFICATION_VERSION
+    s.specification_version = 3
+
+    if Gem::Version.new(Gem::RubyGemsVersion) >= Gem::Version.new('1.2.0') then
+      s.add_runtime_dependency(%q<json>, [">= 1.1.7"])
+      s.add_development_dependency(%q<echoe>, [">= 3.1.1"])
+      s.add_development_dependency(%q<flexmock>, [">= 0.8.6"])
+    else
+      s.add_dependency(%q<json>, [">= 1.1.7"])
+      s.add_dependency(%q<echoe>, [">= 3.1.1"])
+      s.add_dependency(%q<flexmock>, [">= 0.8.6"])
+    end
+  else
+    s.add_dependency(%q<json>, [">= 1.1.7"])
+    s.add_dependency(%q<echoe>, [">= 3.1.1"])
+    s.add_dependency(%q<flexmock>, [">= 0.8.6"])
+  end
+end

data/lib/imobile/validate_receipt.rb

@@ -0,0 +1,104 @@
+# Online validation for receipt blobs generated by the In-App Purchase process.
+#
+# Author:: Victor Costan
+# Copyright:: Copyright (C) 2009 Zergling.Net
+# License:: MIT
+
+require 'base64'
+require 'date'
+require 'net/http'
+require 'net/https'
+require 'openssl'
+require 'time'
+
+require 'rubygems'
+require 'json'
+
+
+# :nodoc: namespace
+module Imobile
+
+# Decodes and validates an In-App Purchase receipt from the App Store.
+#
+# Args:
+#   receipt_blob:: raw receipt in SKPaymentTransaction.transactionReceipt
+#   server_type:: production or sandbox (the API accepts symbols and strings)
+#
+# The decoded receipt is returned as a Ruby-friendly hash. Keys are converted to
+# snake_case symbols (e.g. 'purchase-date' becomes :purchase_date). Dates and
+# relevant numbers are parsed out of the JSON strings.
+#
+# Returns +false+ if validation fails (the receipt was tampered with). Raises a
+# RuntimeException if Apple's Web service returns a HTTP error code.
+def self.validate_receipt(receipt_blob, server_type = :sandbox)
+  AppStoreReceiptValidation.validate_receipt receipt_blob
+end
+
+
+# Implementation details for validate_receipt.
+module AppStoreReceiptValidation
+  # An URI object pointing to the App Store receipt validating server.
+  #
+  # The server type is production or sandbox (strings and symbols work).
+  def self.store_uri(server_type)
+    uri_string = {
+      :production => "https://buy.itunes.apple.com/verifyReceipt",
+      :sandbox => "https://sandbox.itunes.apple.com/verifyReceipt" 
+    }[server_type.to_sym]
+    
+    uri_string and URI.parse(uri_string)
+  end
+  
+  # A Net:HTTP request for validating a receipt.    
+  def self.request(receipt_blob, store_uri)
+    request = Net::HTTP::Post.new store_uri.path
+    request.set_content_type 'application/json'
+    request.body = {'receipt-data' => Base64.encode64(receipt_blob) }.to_json
+    request
+  end
+  
+  # Issues a HTTP request to Apple's receipt validating server.
+  def self.issue_request(http_request, store_uri)
+    http = Net::HTTP.new store_uri.host, store_uri.port
+    http.use_ssl = (store_uri.scheme == 'https')
+    http.verify_mode = OpenSSL::SSL::VERIFY_NONE
+    http.request http_request
+  end
+  
+  # Turns JSON receipt information into a nice Ruby-like receipt.
+  #
+  # String keys are mapped to Ruby symbols (e.g. 'purchase-date' becomes
+  # :purchase_date) and date strings are parsed to Ruby dates.
+  def self.nice_receipt(json_receipt)
+    nice = Hash[*json_receipt.map { |key, value|
+      [key.gsub('-', '_').to_sym, value]
+    }.flatten]
+    
+    [:purchase_date, :original_purchase_date].each do |key|
+      nice[key] = DateTime.parse(nice[key]) if nice[key]
+    end
+    nice[:quantity] = nice[:quantity].to_i if nice[:quantity]
+    
+    nice
+  end
+  
+  # Processes a HTTP response into a receipt.
+  def self.process_response(http_response)
+    unless http_response.kind_of? Net::HTTPSuccess
+      raise "Internal error in Apple's Web service -- #{http_response.inspect}"
+    end
+    
+    response = JSON.parse http_response.body
+    return false unless response['status'] == 0
+    nice_receipt response['receipt']
+  end
+  
+  # Real implementation of Imobile.validate_receipt
+  def self.validate_receipt(receipt_blob, server_type = :production)
+    uri = store_uri server_type
+    
+    process_response issue_request(request(receipt_blob, uri), uri)     
+  end
+end
+
+end  # namespace Imobile

data/lib/imobile.rb

@@ -0,0 +1,7 @@
+# Master include file for the Imobile gem / plug-in.
+#
+# Author:: Victor Costan
+# Copyright:: Copyright (C) 2009 Zergling.Net
+# License:: MIT
+
+require 'imobile/validate_receipt.rb'

data/test/validate_receipt_test.rb

@@ -0,0 +1,50 @@
+# Author:: Victor Costan
+# Copyright:: Copyright (C) 2009 Zergling.Net
+# License:: MIT
+
+require 'imobile'
+
+require 'time'
+require 'test/unit'
+
+
+class ValidateReceiptTest < Test::Unit::TestCase
+  def setup
+    testdata_path = File.join(File.dirname(__FILE__), '..', 'testdata')
+    
+    @forged_sandbox_blob = File.read File.join(testdata_path,
+                                               'forged_sandbox_receipt')
+    @valid_sandbox_blob = File.read File.join(testdata_path,
+                                              'valid_sandbox_receipt')
+  end
+  
+  def test_valid_sandbox_receipt
+    golden_date = Time.parse('2009-07-22 18:52:46 EEST')
+    
+    receipt = Imobile.validate_receipt @valid_sandbox_blob, :sandbox
+    assert receipt, "Genuine receipt failed validation"
+    
+    assert_equal 1, receipt[:quantity], 'Wrong quantity'
+    assert_equal 'us.costan.ZergSupportTests', receipt[:bid], 'Wrong bundle ID'
+    assert_equal '1.9.8.3', receipt[:bvrs], 'Wrong bundle version'
+    assert_equal 'net.zergling.ZergSupport.sub_cheap', receipt[:product_id],
+                 'Wrong product ID'
+    assert_equal '324740515', receipt[:item_id], 'Wrong item (iTunes app) ID' 
+    assert_equal '1000000000016600', receipt[:transaction_id],
+                 'Wrong transaction ID' 
+    assert_equal '1000000000016600', receipt[:original_transaction_id],
+                 'Wrong original transaction ID' 
+    assert_equal golden_date.to_f,
+                 Time.parse(receipt[:purchase_date].to_s).to_f,
+                 'Wrong purchase date'    
+    assert_equal golden_date.to_f,
+                 Time.parse(receipt[:original_purchase_date].to_s).to_f,
+                 'Wrong original purchase date'
+  end
+  
+  def test_forged_sandbox_receipt
+    assert_equal false,
+                 Imobile.validate_receipt(@forged_sandbox_blob, :sandbox),
+                 "Forged receipt passed validation"
+  end
+end

data/testdata/forged_sandbox_receipt

@@ -0,0 +1,6 @@
+{
+  "signature" = "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";
+  "purchase-info" = "ewoJIml0ZW0taWQiID0gIjMyNDc0MDUxNSI7Cgkib3JpZ2luYWwtdHJhbnNhY3Rpb24taWQiID0gIjEwMDAwMDAwMDAwMTY2MDAiOwoJInB1cmNoYXNlLWRhdGUiID0gIjIwMDktMDctMjIgMjI6NTI6NDYgRXRjL0dNVCI7CgkicHJvZHVjdC1pZCIgPSAibmV0LnplcmdsaW5nLlplcmdTdXBwb3J0LnN1Yl9jaGVhcCI7CgkidHJhbnNhY3Rpb24taWQiID0gIjEwMDAwMDAwMDAwMTY2MDAiOwoJInF1YW50aXR5IiA9ICIxIjsKCSJvcmlnaW5hbC1wdXJjaGFzZS1kYXRlIiA9ICIyMDA5LTA3LTIyIDIyOjUyOjQ2IEV0Yy9HTVQiOwoJImJpZCIgPSAidXMuY29zdGFuLlplcmdTdXBwb3J0VGVzdHMiOwoJImJ2cnMiID0gIjEuOS44LjMiOwpA";
+  "pod" = "100";
+  "signing-status" = "0";
+}

data/testdata/valid_sandbox_receipt

@@ -0,0 +1,6 @@
+{
+	"signature" = "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";
+	"purchase-info" = "ewoJIml0ZW0taWQiID0gIjMyNDc0MDUxNSI7Cgkib3JpZ2luYWwtdHJhbnNhY3Rpb24taWQiID0gIjEwMDAwMDAwMDAwMTY2MDAiOwoJInB1cmNoYXNlLWRhdGUiID0gIjIwMDktMDctMjIgMjI6NTI6NDYgRXRjL0dNVCI7CgkicHJvZHVjdC1pZCIgPSAibmV0LnplcmdsaW5nLlplcmdTdXBwb3J0LnN1Yl9jaGVhcCI7CgkidHJhbnNhY3Rpb24taWQiID0gIjEwMDAwMDAwMDAwMTY2MDAiOwoJInF1YW50aXR5IiA9ICIxIjsKCSJvcmlnaW5hbC1wdXJjaGFzZS1kYXRlIiA9ICIyMDA5LTA3LTIyIDIyOjUyOjQ2IEV0Yy9HTVQiOwoJImJpZCIgPSAidXMuY29zdGFuLlplcmdTdXBwb3J0VGVzdHMiOwoJImJ2cnMiID0gIjEuOS44LjMiOwp9";
+	"pod" = "100";
+	"signing-status" = "0";
+}

metadata

@@ -0,0 +1,103 @@
+--- !ruby/object:Gem::Specification 
+name: imobile
+version: !ruby/object:Gem::Version 
+  version: 0.0.1
+platform: ruby
+authors: 
+- Victor Costan
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2009-07-23 00:00:00 -04:00
+default_executable: 
+dependencies: 
+- !ruby/object:Gem::Dependency 
+  name: json
+  type: :runtime
+  version_requirement: 
+  version_requirements: !ruby/object:Gem::Requirement 
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: 1.1.7
+    version: 
+- !ruby/object:Gem::Dependency 
+  name: echoe
+  type: :development
+  version_requirement: 
+  version_requirements: !ruby/object:Gem::Requirement 
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: 3.1.1
+    version: 
+- !ruby/object:Gem::Dependency 
+  name: flexmock
+  type: :development
+  version_requirement: 
+  version_requirements: !ruby/object:Gem::Requirement 
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: 0.8.6
+    version: 
+description: Library for servers backing iPhone applications.
+email: victor@zergling.net
+executables: []
+
+extensions: []
+
+extra_rdoc_files: 
+- CHANGELOG
+- lib/imobile/validate_receipt.rb
+- lib/imobile.rb
+- LICENSE
+- README
+files: 
+- CHANGELOG
+- lib/imobile/validate_receipt.rb
+- lib/imobile.rb
+- LICENSE
+- Manifest
+- Rakefile
+- README
+- test/validate_receipt_test.rb
+- testdata/forged_sandbox_receipt
+- testdata/valid_sandbox_receipt
+- imobile.gemspec
+has_rdoc: true
+homepage: http://github.com/costan/imobile
+licenses: []
+
+post_install_message: 
+rdoc_options: 
+- --line-numbers
+- --inline-source
+- --title
+- Imobile
+- --main
+- README
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      version: "0"
+  version: 
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      version: "1.2"
+  version: 
+requirements: []
+
+rubyforge_project: zerglings
+rubygems_version: 1.3.5
+signing_key: 
+specification_version: 3
+summary: Library for servers backing iPhone applications.
+test_files: 
+- test/validate_receipt_test.rb