苹果钱包未将推送令牌提供给Web服务

Question

I have a Pass for Apple Wallet with a webServiceURL specified which I am currently trying to get working. So far, I can tell if the pass is added or deleted, after verifying with Auth Token and I get the correct Device ID as well as Serial Numbers. However, the value of $_POST is an empty array when the pass is added, so I cannot get the Push Token. Is there something I am missing? Here is my PHP.

<?php
function unauthorized() {
  header('HTTP/1.1 401 Unauthorized');
  exit;
}
$headers = apache_request_headers();
if (isset($headers['Authorization']) && strpos($headers['Authorization'], 'ApplePass') === 0 && strpos($_SERVER['PATH_INFO']) !== false) {
  $pathInfo = $_SERVER['PATH_INFO'];
  if ($pathInfo[0] === '/') { $pathInfo = substr($pathInfo, 1); }
  $parameters = explode('/', $pathInfo);
  if ($parameters[0] !== 'v1' || $parameters[1] !== 'devices' || $parameters[3] !== 'registrations' || $parameters[4] !== 'MYPASSIDENTIFIER') {
    unauthorzed();
    exit;
  }

  $deviceId = $parameters[2];
  $passSerial = $parameters[5];

  if ($_SERVER['REQUEST_METHOD'] === 'DELETE') {
    // User deleted pass

  } else  if ($_SERVER['REQUEST_METHOD'] === 'POST') {
    // User added pass
    $payload = json_decode($_POST);
    // $_POST is empty array, and $payload is always nothing
  } else {
    // Something fishy
    unauthorized();
  }

} else {
  unauthorized();
}

Answer 1

Try using the REQUEST_URI and read the body with php://inpupt

$headers = apache_request_headers();
$request = explode("/", substr(@$_SERVER['REQUEST_URI'], 1));

if (strtoupper($_SERVER['REQUEST_METHOD']) === "POST" 
    && isset($headers['Authorization'])
    && (strpos($headers['Authorization'], 'ApplePass') === 0)
    && $request[1] === "devices"
    && ($request[3] === "registrations") {

    $auth_key = str_replace(array('ApplePass '), '', $headers['Authorization']);

    $device_id = $request[2];
    $pass_id = $request[4];
    $serial = $request[5];

    $dt = @file_get_contents('php://input');
    $det = json_decode($dt);

    // Process Device Token