IAP API 連携ガイド

Android アプリ  ──purchaseToken──▶          お客様サーバー  ──googleAccessToken──▶  Unveily API  ──▶  Google Play
iOS アプリ      ──signedTransaction(JWS)──▶  お客様サーバー  ─────────────────────▶  Unveily API  ──▶  App Store

import { GoogleAuth } from 'google-auth-library';

const auth = new GoogleAuth({
  // シークレット管理ツールから読み込む — 絶対にハードコードしないこと
  credentials: JSON.parse(process.env.GOOGLE_SERVICE_ACCOUNT_JSON),
  scopes: ['https://www.googleapis.com/auth/androidpublisher'],
});

async function getGoogleAccessToken() {
  const client = await auth.getClient();
  const tokenResponse = await client.getAccessToken();
  return tokenResponse.token; // "ya29.xxxx..."
}

npm install google-auth-library

from google.oauth2 import service_account
import google.auth.transport.requests
import json, os

def get_google_access_token() -> str:
    key_data = json.loads(os.environ["GOOGLE_SERVICE_ACCOUNT_JSON"])
    credentials = service_account.Credentials.from_service_account_info(
        key_data,
        scopes=["https://www.googleapis.com/auth/androidpublisher"],
    )
    request = google.auth.transport.requests.Request()
    credentials.refresh(request)
    return credentials.token  # "ya29.xxxx..."

pip install google-auth

import com.google.auth.oauth2.GoogleCredentials;
import java.io.ByteArrayInputStream;
import java.util.Collections;

public String getGoogleAccessToken() throws Exception {
    String keyJson = System.getenv("GOOGLE_SERVICE_ACCOUNT_JSON");
    GoogleCredentials credentials = GoogleCredentials
        .fromStream(new ByteArrayInputStream(keyJson.getBytes()))
        .createScoped(Collections.singletonList(
            "https://www.googleapis.com/auth/androidpublisher"
        ));
    credentials.refreshIfExpired();
    return credentials.getAccessToken().getTokenValue(); // "ya29.xxxx..."
}

<!-- pom.xml -->
<dependency>
  <groupId>com.google.auth</groupId>
  <artifactId>google-auth-library-oauth2-http</artifactId>
  <version>1.23.0</version>
</dependency>

using Google.Apis.Auth.OAuth2;

public async Task<string> GetGoogleAccessTokenAsync()
{
    var keyJson = Environment.GetEnvironmentVariable("GOOGLE_SERVICE_ACCOUNT_JSON")
        ?? throw new InvalidOperationException("GOOGLE_SERVICE_ACCOUNT_JSON が設定されていません。");

    var credential = GoogleCredential
        .FromJson(keyJson)
        .CreateScoped("https://www.googleapis.com/auth/androidpublisher");

    return await credential.UnderlyingCredential
        .GetAccessTokenForRequestAsync(); // "ya29.xxxx..."
}

dotnet add package Google.Apis.Auth

POST https://api.theunveily.com/api/iap/verify
Authorization: Bearer {UNVEILY_LICENSE_KEY}
Content-Type: application/json

{
  "googleAccessToken": "ya29.xxxx...",
  "purchaseToken": "AO-J1OxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxBxxxxxx",
  "packageName": "com.example.myapp",
  "productId": "premium_monthly",
  "productType": "subs",
  "platform": "android"
}

{
  "success": true,
  "data": {
    "success": true,
    "platform": "android",
    "productId": "premium_monthly",
    "orderId": "GPA.1234-5678-9012-34567",
    "purchaseTime": "2025-05-01T09:23:11Z",
    "purchaseState": 0,
    "isAcknowledged": false,
    "storeApiVerified": true
  }
}

POST https://api.theunveily.com/api/iap/verify
Authorization: Bearer {UNVEILY_LICENSE_KEY}
Content-Type: application/json

{
  "platform": "ios",
  "signedTransaction": "eyJhbGciOiJFUzI1NiIsIng1YyI6...",
  "productId": "premium_monthly",
  "productType": "subs"
}

{
  "success": true,
  "data": {
    "success": true,
    "platform": "ios",
    "productId": "premium_monthly",
    "transactionId": "2000000012345678",
    "purchaseTime": "2025-05-01T09:23:11Z",
    "storeApiVerified": true
  }
}

// Node.js / Express の例
import axios from 'axios';
import { getGoogleAccessToken } from './googleAuth';

app.post('/purchase/verify', async (req, res) => {
  const { purchaseToken, productId, productType } = req.body;

  // 1. 新しいGoogle Access Tokenを発行
  const googleAccessToken = await getGoogleAccessToken();

  // 2. Unveily IAP APIを呼び出し
  const response = await axios.post(
    'https://api.theunveily.com/api/iap/verify',
    {
      googleAccessToken,
      purchaseToken,
      packageName: 'com.example.myapp',
      productId,
      productType,
      platform: 'android',
    },
    {
      headers: {
        Authorization: `Bearer ${process.env.UNVEILY_LICENSE_KEY}`,
        'Content-Type': 'application/json',
      },
    }
  );

  if (response.data.success) {
    // 3. 購入した機能を有効化
    await activateFeature(req.user.id, productId);
    res.json({ success: true });
  } else {
    res.status(400).json({ success: false, error: response.data.error });
  }
});