Reputation: 31
I'm new to the topic of iOS auto renewable subscriptions, and I'm trying to understand 2 things:
In Apple docs they always mention a server-side component for receipt validation, but, at the same time, I see libraries like SwiftyStoreKit, which have methods for subscription validation. So, #1 seems possible. But then maybe #2 is possible, too?
I suspect, without server-side validation malicious users may be able to fake a subscription somehow, but is that all I'd need to worry about?
Upvotes: 3
Views: 460