Customer cannot restored a purchased subscription. Log indicates:
"Purchase signature verification **FAILED**. Not adding item."

This happened several months ago as well. I checked the server logs and yes 
indeed the signature was invalid. I don't know what ever happened with that 
customer. 

Customer is using the same Google Account. He can even see the subscription 
and its expiration date on the Google Play Listing, a new feature. 

So why would Google Play send me a bogus signature? Its not the first 
Google glitch, but what can I or the customer do about it?

It's happening in this part of the IABHelper code. As recommended, I 
replaced the inline signature verification with one on a server. 

                if (server.verify(purchaseData, signature, false)) {
                    logDebug("Sku is owned: " + sku);
                    Purchase purchase = new Purchase(itemType, 
purchaseData, signature);

                    if (TextUtils.isEmpty(purchase.getToken())) {
                        logWarn("BUG: empty/null token!");
                        logDebug("Purchase data: " + purchaseData);
                    }

                    // Record ownership and token
                    inv.addPurchase(purchase);
                }
                else {
                    logWarn("Purchase signature verification **FAILED**. 
Not adding item.");
                    logDebug("   Purchase data: " + purchaseData);
                    logDebug("   Signature: " + signature);
                    verificationFailed = true;
                }

Nathan

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Android Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/d/optout.

Reply via email to