In-app Billing Version 3

Transcription

1 13

2 In-app Billing Version 3 Bruno Oliveira Developer Relations, Android 13

3 In-app billing! 2

4 In-app billing! Implement ALL the billing! 2

5 In-app billing! DO NOT WANT 2

6 PREVIOUSLY IN IN-APP BILLING 3

7 Easy

8 Easy mbillingservice.requestpurchase(msku, Consts.ITEM_TYPE_INAPP, mpayloadcontents)

9 Easy mbillingservice.requestpurchase(msku, Consts.ITEM_TYPE_INAPP, mpayloadcontents) public void onpurchasestatechange(purchasestate purchasestate, String itemid, int quantity, long purchasetime, String developerpayload) { if (Consts.DEBUG) { Log.i(TAG, "onpurchasestatechange() itemid: " + itemid + " " + purchasestate); } if (developerpayload == null) { logproductactivity(itemid, purchasestate.tostring()); } else { logproductactivity(itemid, purchasestate + "\n\t" + developerpayload); } if (purchasestate == PurchaseState.PURCHASED) { mowneditems.add(itemid); } // If this is a subscription, then enable the "Edit // Subscriptions" button. for (CatalogEntry e : CATALOG) { if (e.sku.equals(itemid) && e.managed.equals(managed.subscription)) { meditsubscriptionsbutton.setvisibility(view.visible); } } } mcatalogadapter.setowneditems(mowneditems); mowneditemscursor.requery();

10 * change. The signeddata parameter is a plaintext JSON string that is * signed by the server with the developer's private key. The signature * for the signed data is passed in the signature parameter. context the context Easy mbillingservice.requestpurchase(msku, Consts.ITEM_TYPE_INAPP, mpayloadcontents) signeddata the (unencrypted) JSON string signature the signature for the signeddata */ private void purchasestatechanged(context context, String signeddata, String signature) { Intent intent = new Intent(Consts.ACTION_PURCHASE_STATE_CHANGED); } public intent.setclass(context, void onpurchasestatechange(purchasestate BillingService.class); purchasestate, String itemid, intent.putextra(consts.inapp_signed_data, signeddata); intent.putextra(consts.inapp_signature, int quantity, long purchasetime, signature); String developerpayload) { context.startservice(intent); if (Consts.DEBUG) { Log.i(TAG, "onpurchasestatechange() itemid: " + itemid + " " + purchasestate); } /** * This is called when Android Market sends a "notify" message indicating that transaction * information is available. The request includes a nonce (random number used once) that if (developerpayload == null) { logproductactivity(itemid, purchasestate.tostring()); } else { logproductactivity(itemid, purchasestate + "\n\t" + developerpayload); } * we generate and Android Market signs and sends back to us with the purchase state and * other transaction details. This BroadcastReceiver cannot bind to the * MarketBillingService directly so it starts the {@link BillingService}, which does the * actual work of sending the message. * context the context notifyid the notification ID */ if (purchasestate == PurchaseState.PURCHASED) { mowneditems.add(itemid); private void notify(context context, String notifyid) { Intent intent = new Intent(Consts.ACTION_GET_PURCHASE_INFORMATION); intent.setclass(context, BillingService.class); intent.putextra(consts.notification_id, notifyid); } // If this is a subscription, then enable the "Edit // Subscriptions" button. for (CatalogEntry e : CATALOG) { if (e.sku.equals(itemid) && context.startservice(intent); /** * This is called when Android Market sends a server response code. The BillingService can * then report the status of the response if desired. * context the context requestid the request ID that corresponds to a previous request responsecodeindex the ResponseCode ordinal value for the request */ private void checkresponsecode(context context, long requestid, int responsecodeindex) { Intent intent = new Intent(Consts.ACTION_RESPONSE_CODE); intent.setclass(context, BillingService.class); } intent.putextra(consts.inapp_request_id, requestid); intent.putextra(consts.inapp_response_code, responsecodeindex); context.startservice(intent); } e.managed.equals(managed.subscription)) { meditsubscriptionsbutton.setvisibility(view.visible); } } } mcatalogadapter.setowneditems(mowneditems); mowneditemscursor.requery();

11 * change. The signeddata parameter is a plaintext JSON string that is * signed by the server with the developer's private key. The signature * for the signed data is passed in the signature parameter. context the context Easy mbillingservice.requestpurchase(msku, // the current request on the queue. bindtomarketbillingservice(); Consts.ITEM_TYPE_INAPP, return; mpayloadcontents) } signeddata the (unencrypted) JSON string signature the signature for the signeddata */ private void purchasestatechanged(context context, String signeddata, String signature) } { Intent intent = new Intent(Consts.ACTION_PURCHASE_STATE_CHANGED); // If we get here then all the requests ran successfully. If maxstartid // is not -1, then one of the requests started the service, so we can } public intent.setclass(context, void onpurchasestatechange(purchasestate BillingService.class); purchasestate, String itemid, intent.putextra(consts.inapp_signed_data, signeddata); intent.putextra(consts.inapp_signature, int quantity, long purchasetime, signature); String developerpayload) // stop { it now. context.startservice(intent); if (Consts.DEBUG) { if (maxstartid >= 0) { if (Consts.DEBUG) { Log.i(TAG, "onpurchasestatechange() itemid: " + itemid + " " + purchasestate); } } /** stopself(maxstartid); * This is called when Android Market sends a "notify" message indicating that transaction } * information if (developerpayload is available. The request == null) includes { a nonce (random number used } once) that * we generate and Android Market signs and sends back to us with the state and * other transaction logproductactivity(itemid, details. This BroadcastReceiver purchasestate.tostring()); cannot bind to the /** * MarketBillingService } else { directly so it starts the {@link BillingService}, which * This does is the called when we are connected to the MarketBillingService. * actual work logproductactivity(itemid, of sending the message. purchasestate + "\n\t" + * developerpayload); This runs in the main UI thread. * } context the context notifyid the notification ID */ if (purchasestate == PurchaseState.PURCHASED) { mowneditems.add(itemid); private void notify(context context, String notifyid) { Intent intent = new Intent(Consts.ACTION_GET_PURCHASE_INFORMATION); intent.setclass(context, BillingService.class); intent.putextra(consts.notification_id, notifyid); } // If this is a subscription, then enable the "Edit} // Subscriptions" button. for (CatalogEntry e : CATALOG) { if (e.sku.equals(itemid) && context.startservice(intent); maxstartid = request.getstartid(); } } else { // The service crashed, so restart it. Note that this leaves Log.i(TAG, "stopping service, startid: " + maxstartid); public void onserviceconnected(componentname name, IBinder service) { if (Consts.DEBUG) { Log.d(TAG, "Billing service connected"); } mservice = IMarketBillingService.Stub.asInterface(service); runpendingrequests(); /** * This is called when we are disconnected from the MarketBillingService. /** */ * This is called when Android Market sends a server response code. The BillingService can * then report the status of the response if desired. { public void onservicedisconnected(componentname name) { * meditsubscriptionsbutton.setvisibility(view.visible); Log.w(TAG, "Billing service disconnected"); context } the context mservice = null; requestid the request ID that corresponds to a previous request } responsecodeindex } the ResponseCode ordinal value for the request */ } /** private mcatalogadapter.setowneditems(mowneditems); void checkresponsecode(context context, long requestid, int responsecodeindex) * Unbinds from { the MarketBillingService. Call this when the application Intent intent = new Intent(Consts.ACTION_RESPONSE_CODE); * terminates to avoid leaking a ServiceConnection. intent.setclass(context, mowneditemscursor.requery(); BillingService.class); */ } public void unbind() { intent.putextra(consts.inapp_request_id, requestid); try { intent.putextra(consts.inapp_response_code, responsecodeindex); unbindservice(this); context.startservice(intent); } catch (IllegalArgumentException e) { } // This might happen if the service was disconnected

12 /** * change. The signeddata parameter is a plaintext JSON string that is maxstartid = request.getstartid(); * Returns a cursor that can be used to read all the rows and columns of * signed by the server with the developer's private key. The signature } * the "purchased items" table. } else { * for the */ signed data is passed in the signature parameter. context the context mbillingservice.requestpurchase(msku, // The service crashed, so restart it. Note that this leaves public Cursor queryallpurchaseditems() { // the current request on the queue. Easy signeddata return mdb.query(purchased_items_table_name, the (unencrypted) JSON string PURCHASED_COLUMNS, null, bindtomarketbillingservice(); signature null, the signature null, null, for Consts.ITEM_TYPE_INAPP, null); the signeddata return; mpayloadcontents) */ } } private void purchasestatechanged(context context, String signeddata, String signature) } { Intent /** intent = new Intent(Consts.ACTION_PURCHASE_STATE_CHANGED); // If we get here then all the requests ran successfully. If maxstartid // is not -1, then one of the requests started the service, so we can } public intent.setclass(context, * This void is onpurchasestatechange(purchasestate a standard BillingService.class); helper class for constructing the purchasestate, database. String itemid, intent.putextra(consts.inapp_signed_data, */ signeddata); intent.putextra(consts.inapp_signature, int quantity, long purchasetime, signature); String developerpayload) // stop { it now. private class DatabaseHelper extends SQLiteOpenHelper { context.startservice(intent); if (Consts.DEBUG) { if (maxstartid >= 0) { public DatabaseHelper(Context context) { if (Consts.DEBUG) { Log.i(TAG, super(context, "onpurchasestatechange() DATABASE_NAME, null, DATABASE_VERSION); itemid: " + itemid + " " + purchasestate); } } } Log.i(TAG, "stopping service, startid: " + maxstartid); /** stopself(maxstartid); * This is when Android Market sends a "notify" message indicating that transaction } * information if (developerpayload public is available. void oncreate(sqlitedatabase The request == null) includes { db) a { nonce (random number used } once) that * we generate and logproductactivity(itemid, createpurchasetable(db); Android Market signs and sends back to us with the state and * other transaction purchasestate.tostring()); } details. This BroadcastReceiver cannot bind to the /** * MarketBillingService } else { directly so it starts the {@link BillingService}, which * This does is the called when we are connected to the MarketBillingService. * actual logproductactivity(itemid, of sending the message. purchasestate + "\n\t" + * developerpayload); This runs in the main UI thread. * } public void onupgrade(sqlitedatabase db, int oldversion, int newversion) */ { context // the Production-quality context upgrade code should modify the tables notifyid the notification ID public void onserviceconnected(componentname name, IBinder service) { // the database version changes instead of dropping the tables and */ if (purchasestate == PurchaseState.PURCHASED) { if (Consts.DEBUG) { // re-creating them. private void notify(context context, String notifyid) { Log.d(TAG, "Billing service connected"); Intent intent mowneditems.add(itemid); (newversion!= DATABASE_VERSION) { = new Intent(Consts.ACTION_GET_PURCHASE_INFORMATION); } Log.w(TAG, "Database upgrade from old: " + oldversion + " to: intent.setclass(context, BillingService.class); mservice " + = IMarketBillingService.Stub.asInterface(service); newversion); intent.putextra(consts.notification_id, // If this is a subscription, notifyid); runpendingrequests(); db.execsql("drop TABLE IF EXISTS then " + PURCHASE_HISTORY_TABLE_NAME); enable the "Edit} context.startservice(intent); } // Subscriptions" db.execsql("drop button. TABLE IF EXISTS " + PURCHASED_ITEMS_TABLE_NAME); createpurchasetable(db); /** for (CatalogEntry return; e : CATALOG) { * This is called when we are disconnected from the MarketBillingService. /** } if (e.sku.equals(itemid) && */ * This is called } when Android Market sends a server response code. The BillingService can * then report the status of the response if desired. { public void onservicedisconnected(componentname name) { * private void meditsubscriptionsbutton.setvisibility(view.visible); createpurchasetable(sqlitedatabase db) { Log.w(TAG, "Billing service disconnected"); context db.execsql("create } the context TABLE " + PURCHASE_HISTORY_TABLE_NAME + "(" + mservice = null; requestid the request ID that corresponds to a previous request } responsecodeindex } HISTORY_ORDER_ID_COL + " TEXT PRIMARY KEY, " + HISTORY_STATE_COL the ResponseCode + " ordinal INTEGER, value " + for the request */ } /** HISTORY_PRODUCT_ID_COL + " TEXT, " + private mcatalogadapter.setowneditems(mowneditems); void checkresponsecode(context context, long requestid, int responsecodeindex) * Unbinds from { the MarketBillingService. Call this when the application HISTORY_DEVELOPER_PAYLOAD_COL + " TEXT, " + Intent intent = new Intent(Consts.ACTION_RESPONSE_CODE); * terminates to avoid leaking a ServiceConnection. intent.setclass(context, mowneditemscursor.requery(); HISTORY_PURCHASE_TIME_COL + " INTEGER)"); BillingService.class); */ db.execsql("create TABLE " + PURCHASED_ITEMS_TABLE_NAME + "(" } public + void unbind() { intent.putextra(consts.inapp_request_id, PURCHASED_PRODUCT_ID_COL requestid); + " TEXT PRIMARY KEY, " + try { intent.putextra(consts.inapp_response_code, PURCHASED_QUANTITY_COL + responsecodeindex); " INTEGER)"); unbindservice(this); context.startservice(intent); } } catch (IllegalArgumentException e) { } } // This might happen if the service was disconnected

13 /** * change. The signeddata parameter is a plaintext JSON string that is maxstartid = request.getstartid(); * Returns a cursor that can be used to read all the rows and columns of * signed by the server with the developer's private key. The signature } * the "purchased items" table. } else { * for the */ signed data is passed in the signature parameter. context the context mbillingservice.requestpurchase(msku, // The service crashed, so restart it. Note that this leaves public Cursor queryallpurchaseditems() { // the current request on the queue. Easy signeddata return mdb.query(purchased_items_table_name, the (unencrypted) JSON string PURCHASED_COLUMNS, null, bindtomarketbillingservice(); signature null, the signature null, null, for Consts.ITEM_TYPE_INAPP, null); the signeddata return; mpayloadcontents) */ } } private void purchasestatechanged(context context, String signeddata, String signature) } { Intent /** intent = new Intent(Consts.ACTION_PURCHASE_STATE_CHANGED); // If we get here then all the requests ran successfully. If maxstartid // is not -1, then one of the requests started the service, so we can } public intent.setclass(context, * This void is onpurchasestatechange(purchasestate a standard BillingService.class); helper class for constructing the purchasestate, database. String itemid, intent.putextra(consts.inapp_signed_data, */ signeddata); intent.putextra(consts.inapp_signature, int quantity, long purchasetime, signature); String developerpayload) // stop { it now. private class DatabaseHelper extends SQLiteOpenHelper { context.startservice(intent); if (Consts.DEBUG) { if (maxstartid >= 0) { public DatabaseHelper(Context context) { if (Consts.DEBUG) { Log.i(TAG, super(context, "onpurchasestatechange() DATABASE_NAME, null, DATABASE_VERSION); itemid: " + itemid + " " + purchasestate); } } } why does it get so } if (developerpayload public void oncreate(sqlitedatabase == null) { db) { } logproductactivity(itemid, createpurchasetable(db); purchasestate.tostring()); } /** } else logproductactivity(itemid, purchasestate + "\n\t" + * developerpayload); This runs in the main UI thread. } public void onupgrade(sqlitedatabase db, int oldversion, int newversion) */ { // Production-quality upgrade code should modify the tables // the database version if (purchasestate == PurchaseState.PURCHASED) complicated? changes instead of dropping the tables and { if (Consts.DEBUG) { // re-creating them. Log.d(TAG, "Billing service connected"); Intent intent mowneditems.add(itemid); if (newversion!= DATABASE_VERSION) { = new Intent(Consts.ACTION_GET_PURCHASE_INFORMATION); } Log.w(TAG, "Database upgrade from old: " + oldversion + " to: " + intent.setclass(context, newversion); BillingService.class); intent.putextra(consts.notification_id, // If this is a subscription, notifyid); runpendingrequests(); db.execsql("drop TABLE IF EXISTS then " + PURCHASE_HISTORY_TABLE_NAME); enable the "Edit} context.startservice(intent); // Subscriptions" db.execsql("drop button. TABLE IF EXISTS " + PURCHASED_ITEMS_TABLE_NAME); createpurchasetable(db); for (CatalogEntry return; e : CATALOG) { } if (e.sku.equals(itemid) && */ } { public void onservicedisconnected(componentname name) { private void meditsubscriptionsbutton.setvisibility(view.visible); createpurchasetable(sqlitedatabase db) { Log.w(TAG, "Billing service disconnected"); db.execsql("create } TABLE " + PURCHASE_HISTORY_TABLE_NAME + "(" + mservice = null; } } HISTORY_ORDER_ID_COL + " TEXT PRIMARY KEY, " + HISTORY_STATE_COL + " INTEGER, " + } /** HISTORY_PRODUCT_ID_COL + " TEXT, " + mcatalogadapter.setowneditems(mowneditems); HISTORY_DEVELOPER_PAYLOAD_COL + " TEXT, " + Intent intent = new Intent(Consts.ACTION_RESPONSE_CODE); * terminates to avoid leaking a ServiceConnection. intent.setclass(context, mowneditemscursor.requery(); HISTORY_PURCHASE_TIME_COL + " INTEGER)"); BillingService.class); */ db.execsql("create TABLE " + PURCHASED_ITEMS_TABLE_NAME + "(" } public + void unbind() { /** * This is called when Android Market sends a "notify" message indicating that transaction * information is available. The request includes a nonce (random number used once) that * we generate and Android Market signs and sends back to us with the purchase state and * other transaction details. This BroadcastReceiver cannot bind to the * MarketBillingService directly so it starts the {@link BillingService}, which * This does is the called when we are connected to the MarketBillingService. * actual work of sending the message. * context the context notifyid the notification ID public void onserviceconnected(componentname name, IBinder service) { */ private void notify(context context, String notifyid) { } intent.putextra(consts.inapp_request_id, PURCHASED_PRODUCT_ID_COL requestid); + " TEXT PRIMARY KEY, " + intent.putextra(consts.inapp_response_code, PURCHASED_QUANTITY_COL + responsecodeindex); " INTEGER)"); context.startservice(intent); } } } Log.i(TAG, "stopping service, startid: " + maxstartid); mservice = IMarketBillingService.Stub.asInterface(service); /** * This is called when we are disconnected from the MarketBillingService. /** * This is called when Android Market sends a server response code. The BillingService can * then report the status of the response if desired. * context the context requestid the request ID that corresponds to a previous request responsecodeindex the ResponseCode ordinal value for the request */ private void checkresponsecode(context context, long requestid, int responsecodeindex) * Unbinds from { the MarketBillingService. Call this when the application try { unbindservice(this); } catch (IllegalArgumentException e) { // This might happen if the service was disconnected

14

15 item

16 item your app

17 item

18 item receiver

19 item receiver your app

20 Billing V2 asynchronous Library Activity Service Broadcast Receiver Google Play 7

21 Billing V2 asynchronous Library Billing V3 Activity Service Broadcast Receiver Google Play 7

22 Billing V2 asynchronous Billing V3 Library Activity Service Broadcast Receiver Google Play 7

23 Billing V3 8

24 Billing V3 8

25 Billing V3 is synchronous Activity Google Play 9

26 Billing V3 is synchronous buy 50 gold coins Activity Google Play 9

27 Billing V3 is synchronous buy 50 gold coins Activity Google Play OK 9

28 In v2, restoring purchases was expensive My App 123 SD Card Folder John s Phone, Pay to the order of: Billing V Two for: restoring purchases CPU Cycles: Traffic: : : : : :: many lots x 10 ( ) MB ( ) GB ( ) TB John D. Veloper 10

29 In v3, Google Play maintains a client-side cache restore purchases Google Play servers Activity cache purchases so... 11

30 ...in v3, restoring purchases is pretty cheap CPU & NETWORK 99% OFF ON ANY GET-PURCHASES CALL W/ IN-APP BILLING VERSION 3 (THROUGH CLIENT-SIDE CACHING) AVAILABLE ON PARTICIPATING DEVICES. 12

31 ENOUGH SALES. SHOW ME THE CODE. 13

32 </sales> 14

33 Selling Stuff 15

34 Is V3 is supported? 16

35 public void onserviceconnected( ComponentName name, IBinder service) { } mservice = IInAppBillingService.Stub.asInterface(service); int response = mservice.isbillingsupported(3, getpackagename(), inapp ); if (response == BILLING_RESPONSE_RESULT_OK) { // has billing! } else { // no billing V3... } 16

36 public void onserviceconnected( ComponentName name, IBinder service) { } mservice = IInAppBillingService.Stub.asInterface(service); int response = mservice.isbillingsupported(3, getpackagename(), inapp ); if (response == BILLING_RESPONSE_RESULT_OK) { // has billing! } else { // no billing V3... } %+ of active devices 16

37 What does the user own? 17

38 Bundle bundle = mservice.getpurchases( 3, mcontext.getpackagename(), inapp ); cheap if (bundle.getint(response_code) == BILLING_RESPONSE_RESULT_OK) { ArrayList myskus, mypurchases, mysignatures; myskus = bundle.getstringarraylist(response_inapp_item_list); mypurchases bundle.getstringarraylist( RESPONSE_INAPP_PURCHASE_DATA_LIST); mysignatures = bundle.getstringarraylist( RESPONSE_INAPP_PURCHASE_SIGNATURE_LIST); } // handle items here synchronous! 17

39 18

40 18

41 $ 18

42 19

43 19

44 asdb rwfqf 19

45 REPLAY 20

46 REPLAY asdb rwfqf 20

47 REPLAY Probability that this user IS... asdb rwfqf thrilled an influential blogger 87% of all percentages in this slide may be made up. 20

48 unmanaged items managed items 21

49 Launch the purchase flow 22

50 Launch the purchase flow Bundle bundle = mservice.getbuyintent(3, "com.example.myapp", MY_SKU, inapp, developerpayload); PendingIntent pendingintent = bundle.getparcelable(response_buy_intent); if (bundle.getint(response_code) == BILLING_RESPONSE_RESULT_OK) { startintentsenderforresult(pendingintent, RC_BUY, new Intent(), Integer.valueOf(0), Integer.valueOf(0), Integer.valueOf(0)); } result comes back on onactivityresult() 22

51 23

52 onactivityresult() public void onactivityresult(int requestcode, int resultcode, Intent data) { if (requestcode == RC_BUY) { int responsecode = data.getintextra(response_code); String purchasedata = data.getstringextra( RESPONSE_INAPP_PURCHASE_DATA); String signature = data.getstringextra( RESPONSE_INAPP_SIGNATURE); //... 24

53 Purchase data { } orderid :..., packagename :..., productid :..., purchasetime :..., purchasestate :..., developerpayload,..., purchasetoken :... 25

54 hard to lose the purchase on startup: getpurchases() That s it... right? when user wants to purchase: getbuyintent(), launch the Intent. onactivityresult: handle purchase 26

55 27

56 x x - 27

57 28

58 x x - * not to scale. 28

59 A purchase is forever... [not] 29

60 A purchase is forever... [not] Premium upgrade 29

61 A purchase is forever... [not] Premium upgrade Ad-free 29

62 A purchase is forever... [not] Premium upgrade Ad-free Special items 29

63 A purchase is forever... [not] Premium upgrade Ad-free Special items Levels 29

64 So how do you implement: 30

65 So how do you implement: Health potions 30

66 So how do you implement: Health potions 50 coins 30

67 So how do you implement: Health potions 50 coins Season pass 30

68 Consumption 31

69 Consumable items? 32

70 Consumable items? Bruno s stuff 32

71 Consumable items? Bruno s stuff 1. Bruno buys COOL ITEM. 32

72 Consumable items? Bruno s stuff 1. Bruno buys COOL ITEM. COOL ITEM 32

73 Consumable items? Bruno s stuff 1. Bruno buys COOL ITEM. 2. What items does Bruno own? COOL ITEM 32

74 Consumable items? Bruno s stuff 1. Bruno buys COOL ITEM. 2. What items does Bruno own? { COOL ITEM } COOL ITEM 32

75 Consumable items? Bruno s stuff 1. Bruno buys COOL ITEM. 2. What items does Bruno own? { COOL ITEM } COOL ITEM 3. Bruno consumes COOL ITEM 32

76 Consumable items? Bruno s stuff 1. Bruno buys COOL ITEM. 2. What items does Bruno own? { COOL ITEM } 3. Bruno consumes COOL ITEM 32

77 Consumable items? Bruno s stuff 1. Bruno buys COOL ITEM. 2. What items does Bruno own? { COOL ITEM } 3. Bruno consumes COOL ITEM 4. What items does Bruno own? 32

78 Consumable items? Bruno s stuff 1. Bruno buys COOL ITEM. 2. What items does Bruno own? { COOL ITEM } 3. Bruno consumes COOL ITEM 4. What items does Bruno own? { } 32

79 Consumable items? Bundle b = mservice.consumepurchase( 3, // API version com.example.xyz, // package name token // purchase token ) 33

80 When should I consume? 34

81 When should I consume? Method 1 on item s actual usage Method 2 immediately upon purchase 34

82 Method 1: On actual usage 35

83 Method 1: On actual usage 35

84 Method 1: On actual usage Bruno s stuff 35

85 Method 1: On actual usage Bruno s stuff 35

86 Method 1: On actual usage Bruno s stuff POTION 35

87 Method 1: On actual usage Bruno s stuff POTION 35

88 Method 1: On actual usage Bruno s stuff POTION 35

89 Method 1: On actual usage Bruno s stuff 35

90 Limitations? I want a potion! POTION 36

91 Limitations? I want a potion! POTION 36

92 Limitations? I want a potion! I find your request illogical, user. POTION 36

93 Method 2: Consume upon purchase Bruno s stuff 37

94 Method 2: Consume upon purchase Bruno s stuff POTION 37

95 Method 2: Consume upon purchase Bruno s stuff 37

96 Method 2: Consume upon purchase Bruno s stuff POTION 37

97 Method 2: Consume upon purchase Bruno s stuff 37

98 Also: Method 2 immediately upon purchase 38

99 Also: Method 2 immediately upon purchase...and also on startup. IMPORTANT! 38

100 Method 2: Consume upon purchase and startup 39

101 Method 2: Consume upon purchase and startup Bruno s stuff POTION 39

102 Method 2: Consume upon purchase and startup Bruno s stuff 39

103 Summarizing on startup: getpurchases() if has potion, consume() onactivityresult: if purchase successful, consume() when user wants to purchase: getbuyintent(), launch the consume(): If consume successful, add potion to inventory. Intent. 40

104 Get product details 41

105 Query SKU details Bundle getskudetails( int apiversion, String packagename, String type, Bundle skusbundle ); 42

106 { productid : xyz123 type : inapp subs, price : $1.99 title : 100 coins description :... } 43

107 { productid : xyz123 type : inapp subs, price : $1.99 title : 100 coins description :... } Note: Price is for display not parsing! 43

108 Subscriptions 44

109 Are subscriptions supported? 45

110 public void onserviceconnected( ComponentName name, IBinder service) { } mservice = IInAppBillingService.Stub.asInterface(service); int response = mservice.isbillingsupported(3, getpackagename(), subs ); if (response == BILLING_RESPONSE_RESULT_OK) { // has V3 subscriptions! } else { // no V3 subscriptions... } 45

111 Launch the purchase flow (subscription) 46

112 Launch the purchase flow (subscription) Bundle bundle = mservice.getbuyintent(3, "com.example.myapp", MY_SKU, subs, developerpayload); PendingIntent pendingintent = bundle.getparcelable(response_buy_intent); if (bundle.getint(response_code) == BILLING_RESPONSE_RESULT_OK) { startintentsenderforresult(pendingintent, RC_BUY, new Intent(), Integer.valueOf(0), Integer.valueOf(0), Integer.valueOf(0)); } result comes back on onactivityresult() 46

113 Bundle b = mservice.consumepurchase( 3, // API version com.example.xyz, // package name token // purchase token ) A subscription can t be consumed. 47

114 Active Subcriptions? 48

115 Active Subcriptions? Bundle bundle = mservice.getpurchases( 3, mcontext.getpackagename(), ITEM_TYPE_SUBS); if (bundle.getint(response_code) == BILLING_RESPONSE_RESULT_OK) { } // same as before... 48

116 trial subscriptions active subscriptions expired subscriptions 49

117 trial subscriptions active subscriptions appear in getpurchases() expired subscriptions 49

118 trial subscriptions active subscriptions appear in getpurchases() expired subscriptions don t appear in getpurchases() 49

119 trial subscriptions active subscriptions appear in getpurchases() cancelled subscriptions * until end of paid billing period expired subscriptions don t appear in getpurchases() 49

120 Local cache? 50

121 Local cache? Google Play app Refresh: 24h (normally) 50

122 Careful with the UI thread! 51

123 This slide isn t responding. Careful with the UI thread! Do you want to close it? Wait OK 51

124 Safe for UI thread isbillingsupported getbuyintent 52

125 Safe for UI thread Don t call on UI thread isbillingsupported getbuyintent getpurchases consumepurchase getskudetails 52

126 Server side subscription API 53

127 Is it valid? subscription When does it expire? Will it auto-renew? subscription Cancel it. 54

128 { orderid :..., packagename :..., productid :..., purchasetime :..., purchasestate :..., developerpayload,..., purchasetoken :... } 55

129 GET androidpublisher/v1/applications/ {packagename}/subscriptions/{subscriptionid}/ purchases/{token} 56

130 { "kind": "androidpublisher#subscriptionpurchase", "initiationtimestampmsec":..., "validuntiltimestampmsec":..., "autorenewing":... } More at: 57

131 Security 58

132 59

133 59

134 Is this purchase legitimate? 59

135 Is this purchase legitimate? arrrrrr! of courrrse! 59

136 60

137 60

138 60

139 Risk Model 61

140 audience likelihood of piracy item value observed # of fake purchases Risk Model total legitimate technical purchases total purchases difficulty 61

141 Making life hard for pirates Your defenses: 1. developer payload 2. signature verification 3. server-side validation 62

142 Developer Payload Bruno s stuff POTION 63

143 Developer Payload Bruno s stuff belongs to Bruno POTION 63

144 Bruno 64

145 Bruno Onurb 64

146 Developer Payload ONURB s stuff 65

147 Developer Payload ONURB s stuff belongs to Bruno POTION 65

148 Signature Verification Your app has a public key Google Play signs purchases Always check signature! 66

149 Signature Verification PublicKey publickey =...; String signeddata =...; String signature =...; Signature sig = Signature.getInstance( SHA1withRSA ); sig.initverify(publickey); sig.update(signeddata.getbytes()); if (!sig.verify(base64.decode(signature))) { // failed! } return true; 67

150 Is client-side security enough? 68

151 Server-Side Validation check signature don t trust the client check order number valid? duplicate? secure the handshake 69

152 Summary MITM Purchase replay Framework compromise 70

153 Summary MITM Purchase replay Framework compromise Wishing really hard x x x 70

154 Summary MITM Purchase replay Framework compromise Wishing really hard x x x Client-side signature x x verification 70

155 Summary MITM Purchase replay Framework compromise Wishing really hard x x x Client-side signature x x verification + unique developer payload x 70

156 Summary MITM Purchase replay Framework compromise Wishing really hard x x x Client-side signature x x verification + unique developer payload x + Server-side verification 70

157 71

158 KEEP CALM AND USE BEST PRACTICES 71

159 KEEP developer payload CALM AND signature verification USE BEST PRACTICES server-side validation 71

160 Sandbox 72

161 Before Now (Sandbox) 73

162 Before Now (Sandbox) mock product mock purchase flow mock result 73

163 Before Now (Sandbox) mock product mock purchase flow mock result real product real credit card real purchase flow real charge 73

164 Before Now (Sandbox) mock product mock purchase flow mock result real product real credit card real purchase flow real product real credit card real result no charge real purchase flow real charge 73

165 purchase test accounts 74

166 75

167 75

168 Sample: TrivalDrive SDK manager code.google.com/p/ marketbilling 76

169 77

170 IAB v2 77

171 IAB v2 IAB v3 77

172 IAB v2 IAB v3 subscriptions 77

173 IAB v2 IAB v3 subscriptions consumption 77

174 IAB v2 IAB v3 subscriptions consumption product details 77

175 IAB v2 IAB v3 subscriptions server API consumption product details 77

176 IAB v2 IAB v3 subscriptions server API security consumption product details 77

177 IAB v2 IAB v3 subscriptions server API security consumption product details sandbox 77

178 78

179 developer experience 78

180 developer experience user experience 78

181

182 <Thank You!> plus.google.com/+brunooliveira Bruno Oliveira

183 Developers