IABVerifier - Node.js verification library for Google Play products

Installation

Grab from npm
npm install iab_verifier

iab_verifier requires the 'crypto' module. The system should automatically grab this dependency for you.

Overview

iab_verifier takes 2 pieces of information from your Google IAB purchase flow and allows you to verify their authenticity on a remote server. These 2 pieces of info are the signed data blob and the signature both provided in a callback from the IABHelper service( usually in PurchaseCompleteAwaitingVerification).

$3

When instantiating the verifier you need to provide the Google Play public key give to you through the developer portal under (App name) -> Services & APISs -> LICENSING & IN-APP BILLING

#### To verify a receipt:

Javascript:

var IABVerifier = require('iab_verifier'),

var googleplay_public_key = "-- YOUR PUBLIC KEY --";
var googleplayVerifier = new IABVerifier(googleplay_public_key);

var receiptData = receiptDataFromClient;
var receiptSignature = signatureDataFromClient;

var isValid = googleplayVerifier.verifyReceipt(receiptData,receiptSignature);

if (result) {
// Receipt is valid. Grab a beer celebrate!
} else {
// Receipt is NOT valid...
}

$3

See LICENSE file.