I am so sorry if I am asking a very silly question.
I am designing an app which will have short stories – some of them will be pre-installed with the app and others(free or paid) can be downloaded from my server. So I am planning to create an API on my web server which can cater to download/buying request from my app.
The problem is I am little confused how do I authenticate that the requests which my web server api are getting are genuinely coming from my app and by real users but not from some competitor or program who wants to grabs all my data and built his own app on top of it.
Please help.
Thanks in advance
The Store Kit API gives you a receipt when the user makes an in-app purchase. You send that receipt to your server. Your server can then verify the receipt with Apple to make sure the receipt is valid.
See Verifying Store Receipts in the In-App Purchase Programming Guide.