itunes_receipt_decoder 0.2.3 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 7249d3ca881c622ef2e0ccd6d94be8da200eece2
-  data.tar.gz: ccea5b7c522881e76705920a20a6ab49a396d7ea
+  metadata.gz: be8ac7da532b84da681984f7e5e51e8677133d77
+  data.tar.gz: fc0888f8a80f019e20059535fe6e926ed5c56e40
 SHA512:
-  metadata.gz: 812a954786a1bb1dc53677e68a8fe8494b6f8f46765d5ce8404132354680bccffc774bd2fb909e1d76e06e643493da1b4b010eb701b3e680270c91093e86b562
-  data.tar.gz: 0887a6b967bdd98309bc052812bfee0500d3cdcec88725e8cf0f109f3e0e0ff2de186e5624bfc73ce46d68ccedf820d7cc41c4f2d9cc0f2adb767b036db21394
+  metadata.gz: 056453f28cb7f4b62464736c07cbdc90bfe53aa1802d371075fe418146646d11312047cbec620edea1620c4f0b1b4a80319992db6bbf63f93b28314ce3ada481
+  data.tar.gz: b9d31eb78fef4c3753aa19f610cf092474757bee9b01339b303e8a853a286c30405244fcea628a00bb375a9460b97c4cd9b48e3fbab4bb8b1577a8989c39ae89

data/lib/itunes_receipt_decoder.rb

@@ -1,8 +1,4 @@
-require 'time'
-require 'openssl'
-require 'cfpropertylist'
 require 'itunes_receipt_decoder/version'
-require 'itunes_receipt_decoder/decode/base'
 require 'itunes_receipt_decoder/decode/transaction_receipt'
 require 'itunes_receipt_decoder/decode/unified_receipt'
 

data/lib/itunes_receipt_decoder/decode/base.rb

@@ -9,7 +9,7 @@ module ItunesReceiptDecoder
     class Base
       ##
       # The raw receipt, i.e. not base64 encoded
-      attr_reader :raw_receipt, :receipt, :options, :style, :environment
+      attr_reader :raw_receipt, :receipt, :options, :environment
 
       ##
       # Initializes with a raw (base64 decoded receipt)

data/lib/itunes_receipt_decoder/decode/transaction_receipt.rb

@@ -1,3 +1,7 @@
+require 'openssl'
+require 'cfpropertylist'
+require 'itunes_receipt_decoder/decode/base'
+
 ##
 # ItunesReceiptDecoder
 module ItunesReceiptDecoder
@@ -7,9 +11,33 @@ module ItunesReceiptDecoder
     ##
     # ItunesReceiptDecoder::Decode::TransactionReceipt
     class TransactionReceipt < Base
-      def initialize(raw_receipt, options = {})
-        @style = :transaction
-        super
+      PUBLIC_KEY = OpenSSL::PKey::RSA.new <<-PUBLIC_KEY
+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLyvMpRDPgu8N4fNY4ny
+zNm+IE1atP6HZ9Ka3hpUnaLz34fkTMuTEXigMI80QcHTvmZtR2yYuOx61cndpeTq
+xnD0NdCR97PYChGZqzpiOr179FZP258kk1FQfCDVZk1m8xikE5YiFv0xp/Q5Zpv7
+YmlcS5+UqEvo7FtkWhh5ihZ1Y0KkSdmMM96te9Y5BPTinQppjOtLEihLNEgHmw5Z
++R9isAOfNrhOo9N1WdTzOgXKxTM7+MAGCQiT2+dNvxHzUiylFjUV80ECzQLR/PX4
+xYS9Y2qG1raZ9oauX/0D1CiKWl2vvGV00fcaw5II9BytaegCTA6VFQe8vmpvwbOt
+oQIDAQAB
+-----END PUBLIC KEY-----
+PUBLIC_KEY
+
+      def style
+        :transaction
+      end
+
+      def signature_valid?
+        version, sig, cert_length, cert =
+          payload.fetch('signature').unpack('m').first.unpack('c a128 N a*')
+        return false unless
+          version == 2 &&
+          sig.size == 128 &&
+          cert.size == cert_length &&
+          (cert = OpenSSL::X509::Certificate.new(cert)) &&
+          cert.verify(PUBLIC_KEY)
+        data = [version, purchase_info].pack('ca*')
+        cert.public_key.verify(OpenSSL::Digest::SHA1.new, sig, data)
       end
 
       private
@@ -24,16 +52,16 @@ module ItunesReceiptDecoder
       end
 
       def parse_purchase_info
-        purchase_info.keys.each do |key|
+        result = parse_plist(purchase_info)
+        result.keys.each do |key|
           new_key = key.tr('-', '_').to_sym
-          purchase_info[new_key] = purchase_info.delete(key)
+          result[new_key] = result.delete(key)
         end
-        purchase_info
+        result
       end
 
       def purchase_info
-        @purchase_info ||=
-          parse_plist(payload.fetch('purchase-info').unpack('m').first)
+        @purchase_info ||= payload.fetch('purchase-info').unpack('m').first
       end
 
       def payload

data/lib/itunes_receipt_decoder/decode/unified_receipt.rb

@@ -1,3 +1,7 @@
+require 'time'
+require 'openssl'
+require 'itunes_receipt_decoder/decode/base'
+
 ##
 # ItunesReceiptDecoder
 module ItunesReceiptDecoder
@@ -7,6 +11,18 @@ module ItunesReceiptDecoder
     ##
     # ItunesReceiptDecoder::Decode::UnifiedReceipt
     class UnifiedReceipt < Base
+      PUBLIC_KEY = OpenSSL::PKey::RSA.new <<-PUBLIC_KEY
+-----BEGIN PUBLIC KEY-----
+MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjhUpstWqsgkOUjpjO7s
+X7h/JpG8NFN6znxjgGF3ZF6lByO2Of5QLRVWWHAtfsRuwUqFPi/w3oQaoVfJr3sY
+/2r6FRJJFQgZrKrbKjLtlmNoUhU9jIrsv2sYleADrAF9lwVnzg6FlTdq7Qm2rmfN
+UWSfxlzRvFduZzWAdjakh4FuOI/YKxVOeyXYWr9Og8GN0pPVGnG1YJydM05V+RJY
+DIa4Fg3B5XdFjVBIuist5JSF4ejEncZopbCj/Gd+cLoCWUt3QpE5ufXN4UzvwDtI
+jKblIV39amq7pxY1YNLmrfNGKcnow4vpecBqYWcVsvD95Wi8Yl9uz5nd7xtj/pJl
+qwIDAQAB
+-----END PUBLIC KEY-----
+PUBLIC_KEY
+
       ##
       # ASN.1 Field types
       #
@@ -15,6 +31,8 @@ module ItunesReceiptDecoder
         0 => :environment,
         2 => :bundle_id,
         3 => :application_version,
+        4 => :opaque_value,
+        5 => :sha1_hash,
         12 => :creation_date,
         17 => :in_app,
         19 => :original_application_version,
@@ -34,9 +52,22 @@ module ItunesReceiptDecoder
                             original_purchase_date expires_date
                             cancellation_date)
 
-      def initialize(raw_receipt, options = {})
-        @style = :unified
-        super
+      def style
+        :unified
+      end
+
+      def uuid_valid?(uuid)
+        digest = OpenSSL::Digest::SHA1.new
+        digest << uuid.scan(/[0-9A-F]{2}/).map(&:hex).pack('c*')
+        digest << @receipt[:opaque_value]
+        digest << @raw_bundle_id
+        digest.digest == @receipt[:sha1_hash]
+      end
+
+      def signature_valid?
+        serial = pkcs7.signers.first.serial.to_i
+        cert = pkcs7.certificates.find { |c| c.serial.to_i == serial }
+        cert && cert.verify(PUBLIC_KEY)
       end
 
       private
@@ -55,7 +86,12 @@ module ItunesReceiptDecoder
         fields.each do |seq|
           type, _version, value = seq.value.map(&:value)
           next unless (field = RECEIPT_FIELDS[type.to_i])
-          build_result(result, field, value)
+          if %i(opaque_value sha1_hash).include?(field)
+            result[field] = value
+          else
+            @raw_bundle_id = value if field == :bundle_id
+            build_result(result, field, value)
+          end
         end
         result
       end

data/lib/itunes_receipt_decoder/version.rb

@@ -3,5 +3,5 @@
 module ItunesReceiptDecoder
   ##
   # Gem version
-  VERSION = '0.2.3'
+  VERSION = '0.3.0'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: itunes_receipt_decoder
 version: !ruby/object:Gem::Version
-  version: 0.2.3
+  version: 0.3.0
 platform: ruby
 authors:
 - mbaasy.com
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-12-07 00:00:00.000000000 Z
+date: 2015-12-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: CFPropertyList