License keys

Needs Java 11 or newer. Call it from an async task, never from the server's main thread.

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.time.Duration;

public final class License {
    private static final URI VERIFY = URI.create("https://builtbybharat.com/api/v1/licenses/verify");
    private static final HttpClient HTTP = HttpClient.newHttpClient();

    /** True only when the server says the key is valid for this product. */
    public static boolean check(String key) throws Exception {
        // Keys hold only letters, digits and dashes. Refuse anything else before building the JSON.
        if (!key.matches("[A-Za-z0-9-]{1,40}")) return false;
        String body = "{\"key\":\"" + key + "\",\"product\":\"your-product-slug\"}";
        HttpRequest request = HttpRequest.newBuilder(VERIFY)
                .header("Content-Type", "application/json")
                .timeout(Duration.ofSeconds(10))
                .POST(HttpRequest.BodyPublishers.ofString(body))
                .build();
        HttpResponse<String> response = HTTP.send(request, HttpResponse.BodyHandlers.ofString());
        if (response.statusCode() != 200) throw new IllegalStateException("License check failed: HTTP " + response.statusCode());
        return response.body().contains("\"valid\":true"); // or parse it with Gson or Jackson
    }
}

Needs Node.js 18 or newer, which has fetch built in.

const VERIFY_URL = "https://builtbybharat.com/api/v1/licenses/verify";

/** Resolves to true only when the key is valid for this product. */
async function checkLicense(key) {
  const res = await fetch(VERIFY_URL, {
    method: "POST",
    headers: { "Content-Type": "application/json" },
    body: JSON.stringify({ key, product: "your-product-slug" }),
  });
  if (!res.ok) throw new Error(`License check failed: HTTP ${res.status}`); // 429 means too many checks
  const data = await res.json();
  return data.valid === true; // otherwise data.reason is "invalid" or "revoked"
}

Needs the requests package: pip install requests

import requests

VERIFY_URL = "https://builtbybharat.com/api/v1/licenses/verify"

def check_license(key: str) -> bool:
    """True only when the key is valid for this product."""
    res = requests.post(VERIFY_URL, json={"key": key, "product": "your-product-slug"}, timeout=10)
    if res.status_code != 200:  # 429 means too many checks
        raise RuntimeError(f"License check failed: HTTP {res.status_code}")
    return res.json().get("valid") is True  # otherwise "reason" is "invalid" or "revoked"

Paste it into a terminal. Replace the key and the product slug.

curl -s -X POST https://builtbybharat.com/api/v1/licenses/verify \
  -H "Content-Type: application/json" \
  -d '{"key":"BBB-7K2QD-9XH4M-3TPVA-8CNRB","product":"your-product-slug"}'