@nossdev/iap

Thin Capacitor IAP orchestrator. Server-side validation via Attesto.

Status: 0.1.0 — published. API may have breaking changes through the 0.x line as it's exercised in production apps. Pin the minor version (^0.1.0) and watch the CHANGELOG.

npm install @nossdev/iap cordova-plugin-purchase
npx cap sync

import { createIAP } from '@nossdev/iap';

const iap = createIAP({
  products: [
    { id: 'premium_monthly', type: 'subscription', androidPlanId: 'monthly-plan' },
  ],
  backend: {
    baseUrl: 'https://api.your-app.com',
    endpoints: {
      verifyApple: '/api/iap/verify/apple',
      verifyGoogle: '/api/iap/verify/google',
      entitlements: '/api/iap/entitlements',
      restore: '/api/iap/restore',
    },
    getAuthHeaders: async () => ({
      Authorization: `Bearer ${await getAuthToken()}`,
    }),
  },
});

await iap.initialize();

const result = await iap.purchase('premium_monthly');
if (result.status === 'success') {
  // backend has validated; entitlements are cached
}

Documentation

📘 iap.nossdev.com — installation, configuration, framework recipes, API reference.

• Getting started — first purchase in 30 minutes
• Backend contract — four endpoints your backend implements
• Architecture — three-tier model
• Vue + Quasar recipe / React recipe

Why this library

@nossdev/iap does one thing: orchestrate the purchase flow on the client. It

• wraps cordova-plugin-purchase for native purchase + restore,
• POSTs to your backend (which calls Attesto) for receipt validation,
• acknowledges native transactions only after the backend confirms (no phantom grants),
• caches entitlements locally for instant, reactive UI reads,
• recovers unfinished transactions across app launches.

It does not: talk to Attesto directly, define entitlement business logic, manage user auth, or ship paywall UI. Those belong to your app and your backend.

Capacitor support matrix

Optional peer dependency

If you want auto-refresh on app resume (default behavior):

npm install @capacitor/app
npx cap sync

Or disable the listener with options.refreshOnResume: false. See installation guide.

Development

mise install        # Node 22 + npm 10
npm install
npm run typecheck   # tsc --noEmit
npm run lint        # biome check
npm test            # vitest run
npm run build       # tsup → dist/index.{js,cjs,d.ts}
npm run docs:dev    # vitepress dev (http://localhost:5173)

License

MIT — see LICENSE.