furkansenharputlu / f-license

Open Source License Key Generation and Verification Tool written in Go

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Bash

SlaSerX opened this issue · comments

Hello if my app its write on bash how i can make Remote license verification

thx can u show me example with curl

Something like:

curl --location --request GET 'http://localhost:4242/license/verify' \
--header 'Authorization: admin123' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.bnVsbA.BF4LHTey6WwVbYuKSP_kyfeB2-PZPEJYHmkdp_R92y4'

you should attach --cacert server-cert.pem if your license server is https and using self-signed certificate.

Question relating to calling the verification API endpoint. In an actual application, it would be best not to include the Authorization code right? Because if the client program was calling verify with that in someone could sniff the request and then be able to call any admin only API call if they figure out what they are