Saturday, October 1, 2011

[android-developers] Re: LVL - Checking licence validity from a server

For anyone else having this problem, the issue was with the response
data.

Signed data comes in looking like this if it's a TEST EMAIL account:-
0|136040138|com.foo.bar|1|ANlOHQOShF3uJUwv3Ql+fbsgEG9FD35Hag==|
123456789012

if it is a genuine MARKET account
0|136040138|com.foo.bar|1|ANlOHQOShF3uJUwv3Ql+fbsgEG9FD35Hag==|
123456789012:GR=10&VT=0987654321&GT=1234567890

When the signed data is validated, the data after the ':' is stripped,
so trying to re-validate the data will fail in the case of the market
account, and pass in the case of the test email account.

Regards,
Ben

On Sep 30, 11:37 am, Ben <ben.noel.ne...@gmail.com> wrote:
> I have an app that needs to request a key from a remote server. It
> authenticates from the app with lvl, then communicates with the server
> who also checks against the market (a second step in the chain to
> prevent piracy). It authenticates using the responseData and signature
>
> In test this all works a-ok. When I launched my app, this did not
> work:
>
> the app validated with lvl without issue and requested an api key from
> the remote server
>
> the remote server tries to check with lvl and returns false UNLESS the
> email address is in test accounts.
>
> I am testing with the following code:-http://code.google.com/p/android-market-license-verification/
>
> Can anyone shed some light as to why it is not working? Do I need to
> validate using a different key maybe?
>
> Regards,
> Ben

--
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

No comments:

Post a Comment