curl -X POST https://aether-license-manager.pages.dev/api/admin/licenses \
  -H "Authorization: Bearer YOUR_ADMIN_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "productId": "prd_your_product_id",
    "buyerLabel": "customer@email.com",
    "plan": "lifetime",
    "activationLimit": 1
  }'

{
  "ok": true,
  "message": "License generated successfully.",
  "license": {
    "id": "lic_99f4d1e28ba1",
    "key": "LM-883A-KD92-M82L-99AQ",
    "keyPrefix": "LM-883A-KD",
    "buyerLabel": "customer@email.com",
    "productName": "Aether Core",
    "activationLimit": 1,
    "plan": "lifetime"
  }
}

package com.aether.license;

import java.io.BufferedReader;
import java.io.InputStreamReader;
import java.io.OutputStream;
import java.net.HttpURLConnection;
import java.net.URL;
import java.nio.charset.StandardCharsets;
import java.security.MessageDigest;

public class LicenseChecker {
    private static final String VERIFY_URL = "https://aether-license-manager.pages.dev/api/verify";

    public static boolean verify(String productSlug, String licenseKey) {
        try {
            String fingerprint = getMachineFingerprint();
            String payload = String.format(
                "{\"productSlug\":\"%s\",\"licenseKey\":\"%s\",\"fingerprint\":\"%s\"}",
                productSlug, licenseKey, fingerprint
            );

            HttpURLConnection conn = (HttpURLConnection) new URL(VERIFY_URL).openConnection();
            conn.setRequestMethod("POST");
            conn.setRequestProperty("Content-Type", "application/json");
            conn.setRequestProperty("User-Agent", "Aether-LicenseGuard/2.0");
            conn.setDoOutput(true);
            conn.setConnectTimeout(5000);
            conn.setReadTimeout(5000);

            try (OutputStream os = conn.getOutputStream()) {
                os.write(payload.getBytes(StandardCharsets.UTF_8));
            }

            if (conn.getResponseCode() != 200) return false;

            StringBuilder response = new StringBuilder();
            try (BufferedReader br = new BufferedReader(new InputStreamReader(conn.getInputStream()))) {
                String line;
                while ((line = br.readLine()) != null) response.append(line);
            }

            return response.toString().contains("\"valid\":true");
        } catch (Exception e) {
            return false; // Fail closed on connection error
        }
    }

    private static String getMachineFingerprint() {
        try {
            String raw = System.getProperty("os.name") + System.getProperty("user.name") + Runtime.getRuntime().availableProcessors();
            MessageDigest md = MessageDigest.getInstance("SHA-256");
            byte[] hash = md.digest(raw.getBytes(StandardCharsets.UTF_8));
            StringBuilder hex = new StringBuilder();
            for (byte b : hash) hex.append(String.format("%02x", b));
            return hex.toString();
        } catch (Exception e) {
            return "hw_unknown";
        }
    }
}

import os from 'node:os';
import crypto from 'node:crypto';

export async function verifyLicense(productSlug, licenseKey) {
  const fingerprint = crypto
    .createHash('sha256')
    .update(os.hostname() + ':' + os.platform() + ':' + os.cpus().length)
    .digest('hex');

  const res = await fetch('https://aether-license-manager.pages.dev/api/verify', {
    method: 'POST',
    headers: { 'Content-Type': 'application/json' },
    body: JSON.stringify({ productSlug, licenseKey, fingerprint }),
  });

  const data = await res.json().catch(() => ({}));
  return data.valid === true;
}

import hashlib
import platform
import urllib.request
import json

def verify_license(product_slug: str, license_key: str) -> bool:
    fingerprint = hashlib.sha256(f"{platform.node()}:{platform.system()}".encode()).hexdigest()
    url = "https://aether-license-manager.pages.dev/api/verify"
    payload = json.dumps({
        "productSlug": product_slug,
        "licenseKey": license_key,
        "fingerprint": fingerprint
    }).encode('utf-8')

    req = urllib.request.Request(url, data=payload, headers={'Content-Type': 'application/json'})
    try:
        with urllib.request.urlopen(req, timeout=5) as response:
            result = json.loads(response.read().decode())
            return result.get("valid") is True
    except Exception:
        return False