Verify an App Store Transaction Receipt 【苹果服务端 验证一个应用程序商店交易收据有效性】

转自：http://blog.csdn.net/saindy5828/article/details/6414014

1、 从Transaction 的TransactionReceipt属性中得到接收的数据，并以base64编码；

2、创建JSON对象，字典格式，单键值对，键名为“receiptdata”，值为上一次编码的数据，效果：

{"receipt-data":"base64编码之后的数据"}

3、发送HTTP POST请求，将数据发送到App Store ，其地址为：https://buy.itunes.apple.com/verifyReceipt

4、App Store的返回值也是一个JSON格式对象，包括两个键值对：

{
"status" : 0,
"receipt" : { … }
}
说明：

如果status的值为0，就说明该receipt为有效的，否则就是无效的。

 public int verifyReceipt( byte[] receipt) {
        int status = -1;

         //This is the URL of the REST webservice in iTunes App Store
         URL url = new URL("https://buy.itunes.apple.com/verifyReceipt");

         //make connection, use post mode
         HttpsURLConnection connection = (HttpsURLConnection) url.openConnection();
         connection.setRequestMethod("POST");
         connection.setDoOutput(true);
         connection.setAllowUserInteraction(false);

         //Encode the binary receipt data into Base 64
         //Here I'm using org.apache.commons.codec.binary.Base64 as an encoder, since commons-codec is already in Grails classpath
         Base64 encoder = new Base64();
         String encodedReceipt = new String(encoder.encode(receipt));

         //Create a JSON query object
         //Here I'm using Grails' org.codehaus.groovy.grails.web.json.JSONObject
         Map map = new HashMap();
         map.put("receipt-data", encodedReceipt);
         JSONObject jsonObject = new JSONObject(map);

         //Write the JSON query object to the connection output stream
         PrintStream ps = new PrintStream(connection.getOutputStream());
         ps.print(jsonObject.toString());
         ps.close();

         //Call the service
         BufferedReader br = new BufferedReader(new InputStreamReader(connection.getInputStream()));
         //Extract response
         String str;
         StringBuffer sb = new StringBuffer();
         while ((str = br.readLine()) != null) {
             sb.append(str);
             sb.append("/n");
         }
         br.close();
         String response = sb.toString();

         //Deserialize response
         JSONObject result = new JSONObject(response);
        status = result.getInt("status");
         if (status == 0) {
             //provide content
         } else {
             //signal error, throw an exception, do your stuff honey!
         }

         return status ;

     }

验证的方式也可以采用HTTP协议：HttpClient，下载httpcomponents-client，然后导入lib里的几个jar包。

这也是一种方式，不再进行多余的说明了。所谓条条道路通“苹果”。