ios - Apple In-App Purchase Webhook Failing with Status 21002 (Invalid Receipt Data) - Stack Overflow

admin管理员组

文章数量:1345060

I'm handling iOS in-app purchase webhooks in my Node.js backend using Express. My webhook processes one-time purchases and verifies the transaction with Apple. However, I'm encountering a "status": 21002 error when verifying the receipt.

import { Request, Response } from "express";
import { formatJsonRes } from "../utils/helper.ts";
import { IosWebhookService } from "../services/iosWebhook.service.ts";
import { IOS_EVENT_TYPES, IOS_EVENT_SUB_TYPES } from "../utils/constants.ts";

const iosWebhookService = new IosWebhookService();

export const unifiedWebhookHandler = async (
  req: Request,
  res: Response
): Promise<Response> => {
  try {
    const { signedPayload } = req.body;
    console.log("reqBody: ", JSON.stringify(req.body, null, 2));

    const event =
      await iosWebhookService.processWebhookNotification(signedPayload);
    console.log("event: ", JSON.stringify(event, null, 2))

    switch (event.notificationType) {
      case IOS_EVENT_TYPES.ONE_TIME_CHARGE: {
        await iosWebhookService.handleCoinPurchaseEvent(event);
        await iosWebhookService.verifyTransactionAndContent(signedPayload);
        break;
      }
...
      }
      default:
        break;
    }
    return formatJsonRes(res, 200, {
      status: "success",
      message: "Webhook processed successfully",
    });
  } catch (error) {
    console.error(error);
    return formatJsonRes(res, 200, error);
  }
};

verifyTransactionAndContent:

async verifyTransactionAndContent(signedPayload: any): Promise<boolean> {
    try {
      if (!signedPayload) {
        console.error("Missing receipt or transaction information");
        return false;
      }

      const verificationResponse =
        await this.verifyReceiptWithApple(signedPayload);
      if (!verificationResponse) {
        console.error("Receipt verification failed");
        return false;
      }

      return true;
    } catch (error) {
      console.error("Error verifying transaction:", error);
      return false;
    }
  }

verifyReceiptWithApple:

private readonly RECEIPT_VERIFICATION = {
    PRODUCTION_URL: ";,
    SANDBOX_URL: ";,
    SHARED_SECRET: "b8...",
    STATUS_CODES: {
      SUCCESS: 0,
      SANDBOX_RECEIPT: 21007,
      INVALID_RECEIPT: 21002,
      AUTH_ERROR: 21003,
    },
  } as const;

private async verifyReceiptWithApple(
    receipt: string
  ): Promise<IReceiptVerificationResponse | null> {
    const requestBody = {
      "receipt-data": receipt,
      password: this.RECEIPT_VERIFICATION.SHARED_SECRET,
      "exclude-old-transactions": true,
    };

    try {
      let response = await this.makeVerificationRequest(
        this.RECEIPT_VERIFICATION.PRODUCTION_URL,
        requestBody
      );

      if (
        response.status ===
        this.RECEIPT_VERIFICATION.STATUS_CODES.SANDBOX_RECEIPT
      ) {
        console.log(
          "Receipt is from sandbox environment, retrying with sandbox URL..."
        );
        response = await this.makeVerificationRequest(
          this.RECEIPT_VERIFICATION.SANDBOX_URL,
          requestBody
        );
      }

      return this.handleVerificationResponse(response);
    } catch (error) {
      console.error("Error verifying receipt:", error);
      return null;
    }
  }

Relevant logs:

reqBody

reqBody:  {
  "signedPayload": "eyJhbGciOiJFUzI1NiIsIng1YyI6WyJNSUlFTURDQ0E3YWdBd0lCQ..."
}

event:

event:  {
  "notificationType": "ONE_TIME_CHARGE",
  "notificationUUID": "a45cab71-85d5-488f-9a5c-f2207d2cde48",
  "environment": "Sandbox",
  "transactionInfo": {
    "transactionId": "2000000889482224",
    "originalTransactionId": "2000000889482224",
    "bundleId": "com.chatreal.ai",
    "productId": "com.chatreal.coins.silver_pack",
    "purchaseDate": 1743665721000,
    "originalPurchaseDate": 1743665721000,
    "quantity": 1,
    "type": "Consumable",
    "appAccountToken": "e1ed7fb9-3da8-4bb9-ade2-b66043c3ce16",
    "inAppOwnershipType": "PURCHASED",
    "signedDate": 1743665732143,
    "environment": "Sandbox",
    "transactionReason": "PURCHASE",
    "storefront": "IND",
    "storefrontId": "143467",
    "price": 999000,
    "currency": "INR",
    "appTransactionId": "704346128300986174"
  }
}

Error:

Event Type: RECEIPT_VERIFICATION_RESPONSE
Timestamp: 2025-04-03T07:35:34.774Z
Data: {
  "status": 21002
}
===============================

Invalid receipt data provided
Receipt verification failed

The status 21002 error indicates invalid receipt data.

The signedPayload looks correct when logged.

The same payload is passed to verifyReceiptWithApple().

Apple’s documentation suggests this happens due to malformed or incorrect base64 encoding of the receipt.

本文标签： iosApple InApp Purchase Webhook Failing with Status 21002 (Invalid Receipt Data)Stack Overflow