Samsung IAP ISN Signature

The Samsung In-App Purchase (IAP) Instant Server Notification (ISN) is signed using the JSON Web Token (JWT) standard and can be verified using open source libraries or your own implementation. It is encoded in base64 format, but there is no need to decode it as the signature is not human readable.

By verifying the signature of a notification received from the Samsung IAP ISN service, you are assured that the content of the message is created by Samsung and has not been tampered.

For code examples on how to use your IAP public key to verify the notifications you receive from the Samsung IAP ISN service, see Notification Verification Examples.

Example signature

HKoLD9adhbbDoFhjBkoYP1PxWro6c9pPobM5OLPrQW_mfzXO7u-iND5J-oWyMVwmUQEdJBXfwFMyU-BFU4OJyicQFmpbPKxxJMgp8N78jBtK-0wxvk4l_o7Q7A2h6JMe3rVelMqfYh8eD667MfqEc2Gkk0STK5rGk6zIhXWI_J1ajbgbHLK6kUxwUXTqxNUF4vBfSauWOrwJgmPM6RhmIm55WzS5p-5RqRBrqqwNF-pYvxFKkJRSTamCcfMAnfL_TVIZLRYkRd3ofw0Tvtl1kdyJhOKq5NbF4iaNDRt2qAVuDqOLLowXkDbRvWvu23zsQckBfH0omLQtC1gY_-s6pA

Essential Cookies

These cookies are essential as they enable you to move around the website. This category cannot be disabled.

Analytical/Performance Cookies

These cookies collect information about how you use our website. for example which pages you visit most often. All information these cookies collect is used to improve how the website works.

Functionality Cookies

These cookies allow our website to remember choices you make (such as your user name, language or the region your are in) and tailor the website to provide enhanced features and content for you.

Advertising Cookies

These cookies gather information about your browser habits. They remember that you've visited our website and share this information with other organizations such as advertisers.