Apple /v1/attestationData endpoint returning 400 request with valid receipt base64 data

Hello,

I am sending valid base64 receipt data to Apple on the https://data-development.appattest.apple.com/v1/attestationData endpoint and am getting 400 bad request. I have a valid JWT that I currently use successfully for other DeviceCheck endpoints such as persistent bits.

Any help debugging would be useful. Thanks

Replies

XB3-TraceID : b3db61919fe3130f

  • more than likely you're encoding your payload incorrectly. try and follow the p7 encryption here: https://sourcegraph.com/github.com/veehaitch/devicecheck-appattest@1a4b1cf5b3f6c25799d16d07fea4e93823f4545b/-/blob/src/main/kotlin/ch/veehait/devicecheck/appattest/receipt/ReceiptExchange.kt?L83:1

  • The payload is encoded with base64 as per the docs, I have tried binary encoding as well and tried this via curl. I created a bug issue with feedback assistant

Add a Comment

Figured this out, I was using the wrong entitlements