苹果的Technical Note TN2259 "Adding In-App Purchase to your iOS and Mac Applications"提到以下内容:
Always verify your receipt first with the production URL; proceed to verify with the sandbox URL if you receive a 21007 status code. Following this approach ensures that you do not have to switch between URLs while your application is being tested or reviewed in the sandbox or is live in the App Store.
但这不是安全威胁吗？我的意思是，有人可以使用测试帐户创建沙盒收据，以便他们无需实际付款即可进行购买吗？
最佳答案
沙盒收据和测试帐户对于生产应用程序无效，因此您的担心是没有根据的。
关于ios - 在生产应用程序中根据沙箱 URL 验证收据安全吗？，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/12163929/