habitica/website/src/controllers/payments/iap.js

var iap = require('in-app-purchase');
var async = require('async');
var payments = require('./index');
var nconf = require('nconf');

var inAppPurchase = require('in-app-purchase');
inAppPurchase.config({
  // this is the path to the directory containing iap-sanbox/iap-live files
  googlePublicKeyPath: nconf.get('IAP_GOOGLE_KEYDIR')
});

// Validation ERROR Codes
var INVALID_PAYLOAD   = 6778001;
var CONNECTION_FAILED = 6778002;
var PURCHASE_EXPIRED  = 6778003;

exports.androidVerify = function(req, res, next) {
  var iapBody = req.body;
  var user = res.locals.user;

  iap.setup(function (error) {
    if (error) {
      var resObj = {
        ok: false,
        data: 'IAP Error'
      };

      return res.json(resObj);

    }

    /*
      google receipt must be provided as an object
      {
        "data": "{stringified data object}",
        "signature": "signature from google"
        }
    */
    var testObj = {
      data: iapBody.transaction.receipt,
      signature: iapBody.transaction.signature
    };

    // iap is ready
    iap.validate(iap.GOOGLE, testObj, function (err, googleRes) {
      if (err) {
        var resObj = {
          ok: false,
          data: {
            code: INVALID_PAYLOAD,
            message: err.toString()
          }
        };

        return res.json(resObj);
      }

      if (iap.isValidated(googleRes)) {
        var resObj = {
          ok: true,
          data: googleRes
        };

        payments.buyGems({user:user, paymentMethod:'IAP GooglePlay', amount: 5.25});

        return res.json(resObj);
      }
    });
  });
};

exports.iosVerify = function(req, res, next) {
  var iapBody = req.body;
  var user = res.locals.user;

  iap.setup(function (error) {
    if (error) {
      var resObj = {
        ok: false,
        data: 'IAP Error'
      };

      return res.json(resObj);

    }

    //iap is ready
    iap.validate(iap.APPLE, iapBody.transaction.receipt, function (err, appleRes) {
      if (err) {
        var resObj = {
          ok: false,
          data: {
            code: INVALID_PAYLOAD,
            message: err.toString()
          }
        };

        return res.json(resObj);
      }

      if (iap.isValidated(appleRes)) {
        var purchaseDataList = iap.getPurchaseData(appleRes);
        if (purchaseDataList.length > 0) {
          var correctReceipt = true;
          for (var index in purchaseDataList) {
            switch (purchaseDataList[index].productId) {
              case 'com.habitrpg.ios.Habitica.4gems':
                payments.buyGems({user:user, paymentMethod:'IAP AppleStore', amount: 1});
                break;
              case 'com.habitrpg.ios.Habitica.8gems':
                payments.buyGems({user:user, paymentMethod:'IAP AppleStore', amount: 2});
                break;
              case 'com.habitrpg.ios.Habitica.20gems':
              case 'com.habitrpg.ios.Habitica.21gems':
                payments.buyGems({user:user, paymentMethod:'IAP AppleStore', amount: 5.25});
                break;
              case 'com.habitrpg.ios.Habitica.42gems':
                payments.buyGems({user:user, paymentMethod:'IAP AppleStore', amount: 10.5});
                break;
              default:
                correctReceipt = false;
            }
          }
          if (correctReceipt) {
            var resObj = {
              ok: true,
              data: appleRes
            };
            // yay good!
            return res.json(resObj);
          }
        }
        //wrong receipt content
        var resObj = {
          ok: false,
          data: {
            code: INVALID_PAYLOAD,
            message: 'Incorrect receipt content'
          }
        };
        return res.json(resObj);
      }
      //invalid receipt
      var resObj = {
        ok: false,
        data: {
          code: INVALID_PAYLOAD,
          message: 'Invalid receipt'
        }
      };

      return res.json(resObj);
    });
  });
};