Validation of payments and time adjustments in devtosev SDK for Unity

Payments validation

To be protected from fraudulent transactions, we recommend you to use devtodev Anticheat service.

Use this method, and devtodev will check the transaction validity with the payment platform, and the response will be returned to the application.

1. Call the method for payment verification:

DevToDev.AntiCheat.VerifyReceipt(string receipt, string signature, string publicKey,
                                 OnReceiptVerifyCallback callback);

or if you are using Unity IAP plugin:

DevToDev.AntiCheat.VerifyReceipt(string purchasedProduct, string publicKey, OnReceiptVerifyCallback callback)

where OnReceiptVerifyCallback is the function like this:

public void onReceiptVerifyCallback (DevToDev.ReceiptVerificationStatus status) {
  Debug.Log ("Verification status" + status);
  //TODO put your source here
}

Here's how to find your application's public key for licensing (for Google Play platform only, for other platforms the publicKey is not used):

  1. Go to the Google Play Console and sign in. Make sure that you sign in to the account from which the application you are licensing is published (or will be published).
  2. In the application details page, locate the Services & APIs link and click it.
  3. In the Services & APIs page, locate the Licensing & In-App Billing section. Your public key for licensing is given in the Your License Key For This Application field.


ReceiptVerificationStatus can take one of the following values:

public enum ReceiptVerificationStatus {
  ReceiptValid,
  ReceiptNotValid,
  ReceiptServerError,
  ReceiptSandbox,
  ReceiptInternalError    
};

Don't forget that it is enough to set only receipt field to check the payment on iOS (iTunes) or Windows/Windows Phone (Microsoft Store), and for Android (Google Play) the fields signature and publicKey should be set.

NOTICE! Сore SDK should be initialized prior to the call of VerifyPayment function. 

2. In case of an unsuccessful check (ReceiptNotValid result) do not call SDK method RealPayment. In other cases: 

DevToDev.Anatylics.RealPayment(string pPaymentId, float pInAppPrice, string pInAppName,
                               string pInAppCurrencyISOCode);

 

Time cheats check

To check for time cheats call VerifyTime method.

1. Call the method to time verification:

DevToDev.AntiCheat.VerifyTime(OnTimeVerifyCallback callback);

where OnTimeVerifyCallback is the function like this:

public void onTimeVerifyFinished (DevToDev.TimeVerificationStatus status) {
  Debug.Log ("Verification status" + status);
  //TODO put your source here
};

DevToDevTimeVerificationStatus can take one of the following values:

public enum TimeVerificationStatus {
   TimeValid,
   TimeForward,
   TimeRewind
};

NOTICE! Сore SDK should be initialized prior to the call of VerifyTime function.

Secondary methods
Checking the events