桌面客户端激活码接入文档

import hashlib
import hmac
import json
import time
import uuid
from pathlib import Path
from urllib.parse import urlparse

import requests

BASE_URL = "https://your-domain.com"
PROJECT_KEY = "desktop-app"
API_SECRET = "paste-project-api-secret-here"
APP_NAME = "MyDesktopApp"


def get_machine_id() -> str:
    config_dir = Path.home() / ".config" / APP_NAME
    config_dir.mkdir(parents=True, exist_ok=True)
    machine_file = config_dir / "machine_id.txt"

    if machine_file.exists():
        machine_id = machine_file.read_text(encoding="utf-8").strip()
        if machine_id:
            return machine_id

    machine_id = "machine-" + str(uuid.uuid4())
    machine_file.write_text(machine_id, encoding="utf-8")
    return machine_id


def signed_post(path: str, payload: dict) -> dict:
    url = BASE_URL.rstrip("/") + path
    body_payload = {"projectKey": PROJECT_KEY, **payload}
    body = json.dumps(body_payload, separators=(",", ":"), ensure_ascii=False)

    timestamp = str(int(time.time()))
    nonce = str(uuid.uuid4())
    body_hash = hashlib.sha256(body.encode("utf-8")).hexdigest()
    canonical = "\n".join(["POST", urlparse(url).path, timestamp, nonce, body_hash])
    signature = hmac.new(
        API_SECRET.encode("utf-8"),
        canonical.encode("utf-8"),
        hashlib.sha256,
    ).hexdigest()

    response = requests.post(
        url,
        data=body.encode("utf-8"),
        headers={
            "Content-Type": "application/json",
            "X-License-Timestamp": timestamp,
            "X-License-Nonce": nonce,
            "X-License-Signature": signature,
            "X-License-Signature-Version": "v1",
        },
        timeout=10,
    )
    return response.json()


machine_id = get_machine_id()
code = input("请输入激活码: ").strip()

activate = signed_post("/api/license/activate", {
    "code": code,
    "machineId": machine_id,
})
print("activate:", activate)

status = signed_post("/api/license/status", {
    "code": code,
    "machineId": machine_id,
})
print("status:", status)

consume = signed_post("/api/license/consume", {
    "code": code,
    "machineId": machine_id,
    "requestId": str(uuid.uuid4()),
})
print("consume:", consume)

# activate: 用户输入激活码后调用
curl -X POST "https://your-domain.com/api/license/activate" \
  -H "Content-Type: application/json" \
  -d '{
    "projectKey": "desktop-app",
    "code": "A1B2C3D4E5F6G7H8",
    "machineId": "machine-001"
  }'

# status: 程序启动时查询授权
curl -X POST "https://your-domain.com/api/license/status" \
  -H "Content-Type: application/json" \
  -d '{
    "projectKey": "desktop-app",
    "code": "A1B2C3D4E5F6G7H8",
    "machineId": "machine-001"
  }'

# consume: 次数卡真实使用成功后调用
curl -X POST "https://your-domain.com/api/license/consume" \
  -H "Content-Type: application/json" \
  -d '{
    "projectKey": "desktop-app",
    "code": "A1B2C3D4E5F6G7H8",
    "machineId": "machine-001",
    "requestId": "req-001"
  }'

import { createLicenseClient } from '@/lib/license-sdk'

const client = createLicenseClient({
  baseUrl: 'https://your-domain.com',
  projectKey: 'desktop-app',
  apiSecret: 'paste-project-api-secret-here',
  timeoutMs: 10000,
})

await client.activate({
  code: 'A1B2C3D4E5F6G7H8',
  machineId: 'machine-001',
})

await client.status({
  code: 'A1B2C3D4E5F6G7H8',
  machineId: 'machine-001',
})

await client.consume({
  code: 'A1B2C3D4E5F6G7H8',
  machineId: 'machine-001',
  requestId: crypto.randomUUID(),
})