In-app purchase security

[oliverdb]

When our users are purchasing an in-app item they get access to certain features on a webserver.
This is done through a http call from app to our server.

Is there any way to verify that the purchase has taken place? In theory anyone could claim that they are an app?

[oliverdb]

found it myself

https://developer.apple.com/library/...eReceipts.html