It seems that keychain in iOS stores data for each application, and not for each user.
So, if I store the purchase information in the application in the keychain, these products will remain on the device, regardless of which Apple ID is currently registered.
I may need to access the network and perform a restore to find out which products should be available, but it seems like the wrong practice is that the registry is not initiated by the user. In addition, the application should function normally offline.
My question is: how to protect in-app purchases from access to non-Apple-id users who bought them?
source
share