Developer API & Licensing Integration Guide

from cryptography.hazmat.primitives import hashes, serialization
from cryptography.hazmat.primitives.asymmetric import padding
import base64

def verify_signature(canonical_json: str, signature_b64: str, public_key_pem: str) -> bool:
    public_key = serialization.load_pem_public_key(public_key_pem.encode())
    try:
        public_key.verify(
            base64.b64decode(signature_b64),
            canonical_json.encode(),
            padding.PKCS1v15(),
            hashes.SHA256(),
        )
        return True
    except Exception:
        return False

const crypto = require('crypto');

function verifySignature(canonicalJson, signatureB64, publicKeyPem) {
    const verifier = crypto.createVerify('RSA-SHA256');
    verifier.update(canonicalJson, 'utf8');
    verifier.end();
    return verifier.verify(publicKeyPem, Buffer.from(signatureB64, 'base64'));
}

$publicKey = openssl_pkey_get_public($publicKeyPem);
$valid = openssl_verify(
    $canonicalJson,
    base64_decode($signatureB64),
    $publicKey,
    OPENSSL_ALGO_SHA256
) === 1;

import requests

BASE_URL = "https://license.akvinfotech.com"

def activate_license(license_key, hardware_hash, machine_name="Workstation-01"):
    response = requests.post(f"{BASE_URL}/api/license/activate", json={
        "license_key": license_key,
        "hardware_hash": hardware_hash,
        "machine_name": machine_name,
    })
    data = response.json()

    if response.status_code == 200:
        print("Activated:", data["message"])
        return True

    print("Activation failed:", data.get("message"))
    return False

const BASE_URL = "https://license.akvinfotech.com";

async function validateLicense(licenseKey, hardwareHash) {
    const res = await fetch(`${BASE_URL}/api/license/validate`, {
        method: 'POST',
        headers: { 'Content-Type': 'application/json' },
        body: JSON.stringify({ license_key: licenseKey, hardware_hash: hardwareHash }),
    });

    const data = await res.json();
    return res.ok && data.valid === true;
}

use GuzzleHttp\Client;

$client = new Client(['base_uri' => 'https://license.akvinfotech.com']);

function activateLicense(Client $client, string $licenseKey, string $hardwareHash): array
{
    $response = $client->post('/api/license/activate', [
        'json' => [
            'license_key' => $licenseKey,
            'hardware_hash' => $hardwareHash,
        ],
        'http_errors' => false,
    ]);

    return json_decode((string) $response->getBody(), true);
}

curl -X POST https://license.akvinfotech.com/api/license/activate \
  -H "Content-Type: application/json" \
  -d '{
    "license_key": "PRO-A1B2-C3D4-E5F6",
    "hardware_hash": "A1B2C3D4E5F67890",
    "machine_name": "Workstation-PC-01"
  }'

# Vendor-authenticated call (server-side only, never in a shipped app):
curl -X POST https://license.akvinfotech.com/api/license/reset \
  -H "Authorization: Bearer pk_live_xxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"license_key": "PRO-A1B2-C3D4-E5F6"}'