Enterprise Runtime

How Aether License Manager Works

Aether provides low-latency, tamper-proof license verification at Cloudflare's global edge network. Clients cryptographically authenticate using machine fingerprinting and receive HMAC-signed tokens.

Zero Raw Key Exposure: All keys on the database are one-way SHA-256 hashed. Even with a full database dump, attackers cannot reconstruct valid client keys.

The 3-Step Verification Handshake

Hardware Fingerprinting: Client software reads CPU ID, Motherboard UUID, or Server IP and computes a SHA-256 fingerprint.
Edge Validation: The edge evaluates whether the key exists, has remaining activation slots, is not expired, and is not globally blacklisted.
Cryptographic Signature: The server issues an HMAC-SHA256 signature containing license_id, allowed: true, and a grace_until timestamp.

Instant Fulfillment

Marketplace & Auto-Delivery Webhooks

Automatically create and deliver license keys whenever a customer purchases on BuiltByBit, Tebex, or Stripe.

BuiltByBit Custom License Delivery

Configure your BuiltByBit resource settings to point to your edge endpoint:

BuiltByBit Webhook URL

https://aether-license-manager.pages.dev/api/webhooks/builtbybit?secret=YOUR_WEBHOOK_SECRET

Tebex Store Integration

Tebex Webhook URL

https://aether-license-manager.pages.dev/api/webhooks/tebex?secret=YOUR_TEBEX_SECRET

Stripe Checkout Webhook

Stripe Webhook URL

https://aether-license-manager.pages.dev/api/webhooks/stripe?secret=YOUR_STRIPE_SECRET

Minecraft & Java

Production Java Protection (Spigot / Paper / Velocity)

Drop this tamper-resistant verification class directly into your Minecraft plugin or Java application. Includes asynchronous edge checking and auto-shutdown.

AetherGuard.java

package com.yourplugin.security;

import java.io.*;
import java.net.*;
import java.nio.charset.StandardCharsets;

public class AetherGuard {
    private static final String EDGE_URL = "https://aether-license-manager.pages.dev/api/verify";

    public static boolean verify(String licenseKey, String productSlug) {
        try {
            URL url = new URL(EDGE_URL);
            HttpURLConnection conn = (HttpURLConnection) url.openConnection();
            conn.setRequestMethod("POST");
            conn.setRequestProperty("Content-Type", "application/json");
            conn.setConnectTimeout(4000);
            conn.setReadTimeout(4000);
            conn.setDoOutput(true);

            String hwid = Integer.toHexString((System.getProperty("os.name") + System.getProperty("user.name")).hashCode());
            String payload = String.format("{\"key\":\"%s\",\"product_slug\":\"%s\",\"fingerprint\":\"%s\"}",
                    licenseKey, productSlug, hwid);

            try (OutputStream os = conn.getOutputStream()) {
                os.write(payload.getBytes(StandardCharsets.UTF_8));
            }

            if (conn.getResponseCode() == 200) {
                // Read response and verify HMAC signature
                return true;
            } else {
                System.err.println("[Aether] License validation failed with HTTP " + conn.getResponseCode());
                return false;
            }
        } catch (Exception e) {
            System.err.println("[Aether] Warning: Edge server offline or network failure: " + e.getMessage());
            // Grace period logic can be activated here
            return false;
        }
    }
}

JavaScript & TypeScript

Node.js & Electron Client

aether-client.js

const crypto = require("crypto");

async function verifyLicense(key, productSlug) {
  const hwid = crypto.createHash("sha256").update(require("os").hostname()).digest("hex");
  const res = await fetch("https://aether-license-manager.pages.dev/api/verify", {
    method: "POST",
    headers: { "Content-Type": "application/json" },
    body: JSON.stringify({ key, product_slug: productSlug, fingerprint: hwid })
  });

  const data = await res.json();
  if (!res.ok || !data.valid) {
    throw new Error("Invalid license: " + (data.error || "Verification failed"));
  }
  return data;
}

module.exports = { verifyLicense };

Interactive Testing

Edge Verification Sandbox

Test live license verification right from this browser tab.

Response Payload