react-native-iap 14.6.0-rc.1 → 14.6.0-rc.2

package/src/hooks/useIAP.ts

@@ -71,16 +71,13 @@ type UseIap = {
   requestPurchase: (
     params: RequestPurchaseProps,
   ) => Promise<RequestPurchaseResult | null>;
+  /**
+   * @deprecated Use `verifyPurchase` instead. This function will be removed in a future version.
+   */
   validateReceipt: (
-    sku: string,
-    androidOptions?: {
-      packageName: string;
-      productToken: string;
-      accessToken: string;
-      isSub?: boolean;
-    },
-  ) => Promise<any>;
-  /** Verify purchase with the configured providers (alias for validateReceipt) */
+    options: VerifyPurchaseProps,
+  ) => Promise<VerifyPurchaseResult>;
+  /** Verify purchase with the configured providers */
   verifyPurchase: (
     options: VerifyPurchaseProps,
   ) => Promise<VerifyPurchaseResult>;
@@ -311,20 +308,8 @@ export function useIAP(options?: UseIapOptions): UseIap {
   // No local restorePurchases; use the top-level helper via returned API
 
   const validateReceipt = useCallback(
-    async (
-      sku: string,
-      androidOptions?: {
-        packageName: string;
-        productToken: string;
-        accessToken: string;
-        isSub?: boolean;
-      },
-    ) => {
-      return validateReceiptInternal({
-        sku,
-        androidOptions,
-      });
-    },
+    async (options: VerifyPurchaseProps): Promise<VerifyPurchaseResult> =>
+      validateReceiptInternal(options),
     [],
   );
 

package/src/index.ts

@@ -1335,29 +1335,94 @@ export const consumePurchaseAndroid: MutationField<
 
 /**
  * Validate receipt on both iOS and Android platforms
- * @param sku - Product SKU
- * @param androidOptions - Android-specific validation options (required for Android)
+ * @deprecated Use `verifyPurchase` instead. This function will be removed in a future version.
+ * @param options - Platform-specific verification options
+ * @param options.apple - Apple App Store verification options (iOS)
+ * @param options.google - Google Play verification options (Android)
+ * @param options.horizon - Meta Horizon (Quest) verification options
  * @returns Promise<VerifyPurchaseResultIOS | VerifyPurchaseResultAndroid> - Platform-specific receipt validation result
+ *
+ * @example
+ * ```typescript
+ * // Use verifyPurchase instead:
+ * const result = await verifyPurchase({
+ *   apple: { sku: 'premium_monthly' },
+ *   google: {
+ *     sku: 'premium_monthly',
+ *     packageName: 'com.example.app',
+ *     purchaseToken: 'token...',
+ *     accessToken: 'oauth_token...',
+ *     isSub: true
+ *   }
+ * });
+ * ```
  */
 export const validateReceipt: MutationField<'validateReceipt'> = async (
   options,
 ) => {
-  const {sku, androidOptions} = options;
+  const {apple, google, horizon} = options;
   try {
-    const normalizedAndroidOptions =
-      androidOptions != null
-        ? {
-            ...androidOptions,
-            isSub:
-              androidOptions.isSub == null
-                ? undefined
-                : Boolean(androidOptions.isSub),
+    // Validate required fields based on platform
+    if (Platform.OS === 'ios') {
+      if (!apple?.sku) {
+        throw new Error('Missing required parameter: apple.sku');
+      }
+    } else if (Platform.OS === 'android') {
+      // Horizon verification path (e.g., Meta Quest) - skip Google validation
+      if (horizon?.sku) {
+        // Validate all required Horizon fields
+        if (!horizon.userId || !horizon.accessToken) {
+          throw new Error(
+            'Missing required Horizon parameters: userId and accessToken are required when horizon.sku is provided',
+          );
+        }
+        // Horizon verification will be handled by native layer
+      } else if (!google) {
+        throw new Error('Missing required parameter: google options');
+      } else {
+        const requiredFields: (keyof typeof google)[] = [
+          'sku',
+          'accessToken',
+          'packageName',
+          'purchaseToken',
+        ];
+        for (const field of requiredFields) {
+          if (!google[field]) {
+            throw new Error(
+              `Missing or empty required parameter: google.${field}`,
+            );
           }
-        : undefined;
+        }
+      }
+    }
 
     const params: NitroReceiptValidationParams = {
-      sku,
-      androidOptions: normalizedAndroidOptions,
+      apple: apple?.sku
+        ? {
+            sku: apple.sku,
+          }
+        : null,
+      google:
+        google?.sku &&
+        google.accessToken &&
+        google.packageName &&
+        google.purchaseToken
+          ? {
+              sku: google.sku,
+              accessToken: google.accessToken,
+              packageName: google.packageName,
+              purchaseToken: google.purchaseToken,
+              isSub: google.isSub == null ? undefined : Boolean(google.isSub),
+            }
+          : null,
+      horizon:
+        horizon?.sku && horizon.userId && horizon.accessToken
+          ? {
+              sku: horizon.sku,
+              userId: horizon.userId,
+              accessToken: horizon.accessToken,
+            }
+          : null,
     };
 
     const nitroResult = await IAP.instance.validateReceipt(params);

package/src/specs/RnIap.nitro.ts

@@ -14,8 +14,9 @@ import type {
   ProductCommon,
   PurchaseCommon,
   PurchaseOptions,
-  VerifyPurchaseAndroidOptions,
-  VerifyPurchaseProps,
+  VerifyPurchaseAppleOptions,
+  VerifyPurchaseGoogleOptions,
+  VerifyPurchaseHorizonOptions,
   VerifyPurchaseResultAndroid,
   RequestPurchaseIosProps,
   RequestPurchaseResult,
@@ -64,18 +65,30 @@ export type ExternalLinkTypeAndroid =
 // ║                                  PARAMS                                  ║
 // ╚══════════════════════════════════════════════════════════════════════════╝
 
-// Receipt validation parameters
+// Receipt validation parameters (platform-specific)
 
-export interface NitroReceiptValidationAndroidOptions {
-  accessToken: VerifyPurchaseAndroidOptions['accessToken'];
-  isSub?: VerifyPurchaseAndroidOptions['isSub'];
-  packageName: VerifyPurchaseAndroidOptions['packageName'];
-  productToken: VerifyPurchaseAndroidOptions['productToken'];
+export interface NitroReceiptValidationAppleOptions {
+  sku: VerifyPurchaseAppleOptions['sku'];
+}
+
+export interface NitroReceiptValidationGoogleOptions {
+  accessToken: VerifyPurchaseGoogleOptions['accessToken'];
+  isSub?: VerifyPurchaseGoogleOptions['isSub'];
+  packageName: VerifyPurchaseGoogleOptions['packageName'];
+  purchaseToken: VerifyPurchaseGoogleOptions['purchaseToken'];
+  sku: VerifyPurchaseGoogleOptions['sku'];
+}
+
+export interface NitroReceiptValidationHorizonOptions {
+  accessToken: VerifyPurchaseHorizonOptions['accessToken'];
+  sku: VerifyPurchaseHorizonOptions['sku'];
+  userId: VerifyPurchaseHorizonOptions['userId'];
 }
 
 export interface NitroReceiptValidationParams {
-  sku: VerifyPurchaseProps['sku'];
-  androidOptions?: NitroReceiptValidationAndroidOptions | null;
+  apple?: NitroReceiptValidationAppleOptions | null;
+  google?: NitroReceiptValidationGoogleOptions | null;
+  horizon?: NitroReceiptValidationHorizonOptions | null;
 }
 
 // Purchase request parameters
@@ -822,6 +835,7 @@ export interface RnIap extends HybridObject<{ios: 'swift'; android: 'kotlin'}> {
 
   /**
    * Validate a receipt on the appropriate platform
+   * @deprecated Use `verifyPurchase` instead. This function will be removed in a future version.
    * @param params - Receipt validation parameters including SKU and platform-specific options
    * @returns Promise<NitroReceiptValidationResultIOS | NitroReceiptValidationResultAndroid> - Platform-specific validation result
    */

package/src/types.ts

@@ -917,6 +917,14 @@ export type RequestPurchaseProps =
       useAlternativeBilling?: boolean | null;
     };
 
+/**
+ * Platform-specific purchase request parameters.
+ *
+ * Note: "Platforms" refers to the SDK/OS level (apple, google), not the store.
+ * - apple: Always targets App Store
+ * - google: Targets Play Store by default, or Horizon when built with horizon flavor
+ *   (determined at build time, not runtime)
+ */
 export interface RequestPurchasePropsByPlatforms {
   /** @deprecated Use google instead */
   android?: (RequestPurchaseAndroidProps | null);
@@ -963,6 +971,14 @@ export interface RequestSubscriptionIosProps {
   withOffer?: (DiscountOfferInputIOS | null);
 }
 
+/**
+ * Platform-specific subscription request parameters.
+ *
+ * Note: "Platforms" refers to the SDK/OS level (apple, google), not the store.
+ * - apple: Always targets App Store
+ * - google: Targets Play Store by default, or Horizon when built with horizon flavor
+ *   (determined at build time, not runtime)
+ */
 export interface RequestSubscriptionPropsByPlatforms {
   /** @deprecated Use google instead */
   android?: (RequestSubscriptionAndroidProps | null);
@@ -984,12 +1000,18 @@ export interface RequestVerifyPurchaseWithIapkitGoogleProps {
   purchaseToken: string;
 }
 
+/**
+ * Platform-specific verification parameters for IAPKit.
+ *
+ * - apple: Verifies via App Store (JWS token)
+ * - google: Verifies via Play Store (purchase token)
+ */
 export interface RequestVerifyPurchaseWithIapkitProps {
   /** API key used for the Authorization header (Bearer {apiKey}). */
   apiKey?: (string | null);
-  /** Apple verification parameters. */
+  /** Apple App Store verification parameters. */
   apple?: (RequestVerifyPurchaseWithIapkitAppleProps | null);
-  /** Google verification parameters. */
+  /** Google Play Store verification parameters. */
   google?: (RequestVerifyPurchaseWithIapkitGoogleProps | null);
 }
 
@@ -1088,21 +1110,76 @@ export interface ValidTimeWindowAndroid {
   startTimeMillis: string;
 }
 
-export interface VerifyPurchaseAndroidOptions {
+/**
+ * Apple App Store verification parameters.
+ * Used for server-side receipt validation via App Store Server API.
+ */
+export interface VerifyPurchaseAppleOptions {
+  /** Product SKU to validate */
+  sku: string;
+}
+
+/**
+ * Google Play Store verification parameters.
+ * Used for server-side receipt validation via Google Play Developer API.
+ *
+ * ⚠️ SECURITY: Contains sensitive tokens (accessToken, purchaseToken). Do not log or persist this data.
+ */
+export interface VerifyPurchaseGoogleOptions {
+  /**
+   * Google OAuth2 access token for API authentication.
+   * ⚠️ Sensitive: Do not log this value.
+   */
   accessToken: string;
+  /** Whether this is a subscription purchase (affects API endpoint used) */
   isSub?: (boolean | null);
+  /** Android package name (e.g., com.example.app) */
   packageName: string;
-  productToken: string;
+  /**
+   * Purchase token from the purchase response.
+   * ⚠️ Sensitive: Do not log this value.
+   */
+  purchaseToken: string;
+  /** Product SKU to validate */
+  sku: string;
 }
 
-export interface VerifyPurchaseProps {
-  /** Android-specific validation options */
-  androidOptions?: (VerifyPurchaseAndroidOptions | null);
-  /** Product SKU to validate */
+/**
+ * Meta Horizon (Quest) verification parameters.
+ * Used for server-side entitlement verification via Meta's S2S API.
+ * POST https://graph.oculus.com/$APP_ID/verify_entitlement
+ *
+ * ⚠️ SECURITY: Contains sensitive token (accessToken). Do not log or persist this data.
+ */
+export interface VerifyPurchaseHorizonOptions {
+  /**
+   * Access token for Meta API authentication (OC|$APP_ID|$APP_SECRET or User Access Token).
+   * ⚠️ Sensitive: Do not log this value.
+   */
+  accessToken: string;
+  /** The SKU for the add-on item, defined in Meta Developer Dashboard */
   sku: string;
+  /** The user ID of the user whose purchase you want to verify */
+  userId: string;
 }
 
-export type VerifyPurchaseResult = VerifyPurchaseResultAndroid | VerifyPurchaseResultIOS;
+/**
+ * Platform-specific purchase verification parameters.
+ *
+ * - apple: Verifies via App Store Server API
+ * - google: Verifies via Google Play Developer API
+ * - horizon: Verifies via Meta's S2S API (verify_entitlement endpoint)
+ */
+export interface VerifyPurchaseProps {
+  /** Apple App Store verification parameters. */
+  apple?: (VerifyPurchaseAppleOptions | null);
+  /** Google Play Store verification parameters. */
+  google?: (VerifyPurchaseGoogleOptions | null);
+  /** Meta Horizon (Quest) verification parameters. */
+  horizon?: (VerifyPurchaseHorizonOptions | null);
+}
+
+export type VerifyPurchaseResult = VerifyPurchaseResultAndroid | VerifyPurchaseResultHorizon | VerifyPurchaseResultIOS;
 
 export interface VerifyPurchaseResultAndroid {
   autoRenewing: boolean;
@@ -1125,6 +1202,17 @@ export interface VerifyPurchaseResultAndroid {
   testTransaction: boolean;
 }
 
+/**
+ * Result from Meta Horizon verify_entitlement API.
+ * Returns verification status and grant time for the entitlement.
+ */
+export interface VerifyPurchaseResultHorizon {
+  /** Unix timestamp (seconds) when the entitlement was granted. */
+  grantTime?: (number | null);
+  /** Whether the entitlement verification succeeded. */
+  success: boolean;
+}
+
 export interface VerifyPurchaseResultIOS {
   /** Whether the receipt is valid */
   isValid: boolean;