Module: AppStoreServerApi::Utils::Decoder

Defined in:
lib/app_store_server_api/utils/decoder.rb

Class Method Summary collapse

Class Method Details

.apple_root_cas ⇒ Object 



31
32
33
34
35
 
# File 'lib/app_store_server_api/utils/decoder.rb', line 31

def apple_root_cas
  Dir.glob(File.join(__dir__, "certs", "*.cer")).map do |filename|
    OpenSSL::X509::Certificate.new File.read(filename)
  end
end

.decode_jws!(jws) ⇒ Object 



11
12
13
14
15
16
17
18
19
 
# File 'lib/app_store_server_api/utils/decoder.rb', line 11

def decode_jws! jws
  payload, = JWT.decode(jws, nil, true, algorithm: "ES256") do |header|
    certs = header["x5c"].map { |c| OpenSSL::X509::Certificate.new Base64.urlsafe_decode64(c) }
    apple_root_cas.include? certs.last or raise JWT::DecodeError, "Missing root certificate"
    certs.each_cons(2).all? { |a, b| a.verify(b.public_key) } or raise JWT::DecodeError, "Broken trust chain"
    certs[0].public_key
  end
  payload
end

.decode_transaction(signed_transaction:) ⇒ Object 



21
22
23
 
# File 'lib/app_store_server_api/utils/decoder.rb', line 21

def decode_transaction(signed_transaction:)
  decode_jws! signed_transaction
end

.decode_transactions(signed_transactions:) ⇒ Object 



25
26
27
28
29
 
# File 'lib/app_store_server_api/utils/decoder.rb', line 25

def decode_transactions(signed_transactions:)
  signed_transactions.map do |signed_transaction|
    decode_transaction signed_transaction: signed_transaction
  end
end