Validated pending purchases

Runtime Framework
1

Hey,

We got this one player who faked a bunch of purchases on Android. Looking at the transactions they have ‘purchaseState’ set to 1. And that’s apparently Pending. So maybe you can get a valid receipt while the purchase is pending, but we shouldn’t reward the user before it’s actually purchased.

Any clue what’s going on here and how do we prevent this, kinda feels like how Nakama handles validations that is the issue if pending purchases validate but you can’t check if they are completed or not.

Thanks

2

Hello @nixarn_tp,

We’re aware of this issue - Nakama is accepting a Google purchase receipt in pending status as valid, we’ll make sure to address this in the next release and reject receipts that are in “pending” state.

Best.

3

Got it - thanks! Looking forward to the fix, now we have to manually ban a users who use this cheat.

4

FYI: NK-639 Improve Google IAP validation. by sesposito · Pull Request #1336 · heroiclabs/nakama · GitHub