ios – Apple In-App Buy Webhook Failing with Standing 21002 (Invalid Receipt Information)

I am dealing with iOS in-app buy webhooks in my Node.js backend utilizing Categorical. My webhook processes one-time purchases and verifies the transaction with Apple. Nevertheless, I am encountering a “standing”: 21002 error when verifying the receipt.

import { Request, Response } from "specific";
import { formatJsonRes } from "../utils/helper.ts";
import { IosWebhookService } from "../providers/iosWebhook.service.ts";
import { IOS_EVENT_TYPES, IOS_EVENT_SUB_TYPES } from "../utils/constants.ts";

const iosWebhookService = new IosWebhookService();

export const unifiedWebhookHandler = async (
  req: Request,
  res: Response
): Promise => {
  strive {
    const { signedPayload } = req.physique;
    console.log("reqBody: ", JSON.stringify(req.physique, null, 2));

    const occasion =
      await iosWebhookService.processWebhookNotification(signedPayload);
    console.log("occasion: ", JSON.stringify(occasion, null, 2))

    swap (occasion.notificationType) {
      case IOS_EVENT_TYPES.ONE_TIME_CHARGE: {
        await iosWebhookService.handleCoinPurchaseEvent(occasion);
        await iosWebhookService.verifyTransactionAndContent(signedPayload);
        break;
      }
...
      }
      default:
        break;
    }
    return formatJsonRes(res, 200, {
      standing: "success",
      message: "Webhook processed efficiently",
    });
  } catch (error) {
    console.error(error);
    return formatJsonRes(res, 200, error);
  }
};

verifyTransactionAndContent:

async verifyTransactionAndContent(signedPayload: any): Promise {
    strive {
      if (!signedPayload) {
        console.error("Lacking receipt or transaction data");
        return false;
      }

      const verificationResponse =
        await this.verifyReceiptWithApple(signedPayload);
      if (!verificationResponse) {
        console.error("Receipt verification failed");
        return false;
      }

      return true;
    } catch (error) {
      console.error("Error verifying transaction:", error);
      return false;
    }
  }

verifyReceiptWithApple:

personal readonly RECEIPT_VERIFICATION = {
    PRODUCTION_URL: "https://purchase.itunes.apple.com/verifyReceipt",
    SANDBOX_URL: "https://sandbox.itunes.apple.com/verifyReceipt",
    SHARED_SECRET: "b8...",
    STATUS_CODES: {
      SUCCESS: 0,
      SANDBOX_RECEIPT: 21007,
      INVALID_RECEIPT: 21002,
      AUTH_ERROR: 21003,
    },
  } as const;

personal async verifyReceiptWithApple(
    receipt: string
  ): Promise {
    const requestBody = {
      "receipt-data": receipt,
      password: this.RECEIPT_VERIFICATION.SHARED_SECRET,
      "exclude-old-transactions": true,
    };

    strive {
      let response = await this.makeVerificationRequest(
        this.RECEIPT_VERIFICATION.PRODUCTION_URL,
        requestBody
      );

      if (
        response.standing ===
        this.RECEIPT_VERIFICATION.STATUS_CODES.SANDBOX_RECEIPT
      ) {
        console.log(
          "Receipt is from sandbox atmosphere, retrying with sandbox URL..."
        );
        response = await this.makeVerificationRequest(
          this.RECEIPT_VERIFICATION.SANDBOX_URL,
          requestBody
        );
      }

      return this.handleVerificationResponse(response);
    } catch (error) {
      console.error("Error verifying receipt:", error);
      return null;
    }
  }

Related logs:

reqBody

reqBody:  {
  "signedPayload": "eyJhbGciOiJFUzI1NiIsIng1YyI6WyJNSUlFTURDQ0E3YWdBd0lCQ..."
}

occasion:

occasion:  {
  "notificationType": "ONE_TIME_CHARGE",
  "notificationUUID": "a45cab71-85d5-488f-9a5c-f2207d2cde48",
  "atmosphere": "Sandbox",
  "transactionInfo": {
    "transactionId": "2000000889482224",
    "originalTransactionId": "2000000889482224",
    "bundleId": "com.chatreal.ai",
    "productId": "com.chatreal.cash.silver_pack",
    "purchaseDate": 1743665721000,
    "originalPurchaseDate": 1743665721000,
    "amount": 1,
    "kind": "Consumable",
    "appAccountToken": "e1ed7fb9-3da8-4bb9-ade2-b66043c3ce16",
    "inAppOwnershipType": "PURCHASED",
    "signedDate": 1743665732143,
    "atmosphere": "Sandbox",
    "transactionReason": "PURCHASE",
    "storefront": "IND",
    "storefrontId": "143467",
    "value": 999000,
    "foreign money": "INR",
    "appTransactionId": "704346128300986174"
  }
}

Error:

Occasion Sort: RECEIPT_VERIFICATION_RESPONSE
Timestamp: 2025-04-03T07:35:34.774Z
Information: {
  "standing": 21002
}
===============================

Invalid receipt information offered
Receipt verification failed

The standing 21002 error signifies invalid receipt information.

The signedPayload appears to be like right when logged.

The identical payload is handed to verifyReceiptWithApple().

Apple’s documentation suggests this occurs because of malformed or incorrect base64 encoding of the receipt.