This has been asked many times, but in all the questions there wasn't any guide complete enough.
- All the guides recycle the Sample project bundled with the billing
library, even if on Android Developers it's clearly said that the
util
package should be written from scratch/heavily edited instead of just copying the stock one. - There are no directions on which data send to and how to verify on a personal server if the purchase is legitimate.
- There's no hint, basically, on how to make the sample code stronger,i.e. on how to secure the key in a serverless environment, on how to generate and check a purchase payload and so on.
Maybe I've missed some line or I'm just a bit scared and confused, but I'm asking for some complete resource to consult and some clarification on the three doubts I wrote above.