✓ Running

License Authority Server

Secure, cryptographically-signed licensing system for software distribution, deployment tracking, clone detection, and license enforcement.

🚀 System Status: Ready Database connected | API active | Signing service initialized

🔐 Ed25519 Signing

Asymmetric cryptographic signing using libsodium. Private key kept secure on Authority server only.

🛡️ License Verification

Verify licenses, track deployments, and enforce license policies with full audit logging.

🔍 Clone Detection

Detect unauthorized license cloning across different installations with fingerprint analysis.

📊 Deployment Tracking

Track installation metadata (fingerprint, hostname, IP) to prevent unauthorized deployments.

⚠️ Revocation Enforcement

Immediately revoke licenses with full lockout policy. No backdoors or bypass mechanisms.

🚨 Security Alerts

Email and webhook alerts for security events like cloning, revocation, and suspicious activity.

📡 API Endpoints

                    POST
                    /api/v1/license/verify - Verify a license
                

Rate limited: 60 requests per minute per client

⚙️ Quick Start Commands

php artisan
                        migrate
php artisan
                        licensing:generate-keys --key-id=signing-key-2026-01
php artisan
                        licensing:activate-key signing-key-2026-01
php artisan
                        licensing:issue --interactive
php artisan
                        licensing:status
php artisan
                        test

⚠️ Important: Private Key Security After running php artisan licensing:generate-keys, the private key will be displayed in console. You MUST immediately store this in your environment variable LICENSING_ED25519_SECRET on the production server. Never commit this key to Git or share via unencrypted channels.

View Documentation Test API (POST)