App Store
App Store Server Notifications v2
App Store Server Notifications v2 (ASSN v2) are signed, server-to-server messages from Apple about purchase and subscription lifecycle events. Each is a JWS payload delivered to a URL you configure in App Store Connect.
ASSN v2 tells your server, in near real time, when a subscription starts, renews, refunds, or cancels. Each notification is a signed JWS you verify against Apple's certificate chain, so it cannot be forged.
Attribloom uses these notifications to confirm conversions and to reverse commissions automatically on refunds and cancellations. Apple posts to the URL configured in App Store Connect, so an integration forwards each notification to Attribloom signed with its forwarding secret.
Frequently asked
How is an App Store Server Notification verified?
Each notification is a JWS signed by Apple. The receiver verifies the signature against Apple's certificate chain before trusting the payload.
What is the difference between ASSN v2 and the App Store Server API?
ASSN v2 is push: Apple sends you events. The App Store Server API is pull: your server queries Apple for transaction history or requests a test notification.