Commercial License Server for JEduOne ERP
Cryptographically signed, tamper-proof license management architecture with asymmetric RSA-2048 signing, automated domain binding, quota enforcement, and offline grace period handling.
Asymmetric RSA-2048 Signing
Tokens are signed with the JNVWeb private key. School installations hold only the public verification key, making local DB tampering mathematically impossible.
Hardware & Domain Binding
Binds licenses strictly to authorized school domains and unique installation identifiers (INS-XXXXX) with 1-click migration unbinds.
Offline Grace Tolerance
In the event of network or server outages, school ERP installations seamlessly continue operating with verified cached tokens for a 3-day grace period.
REST API Endpoints (v1)
| Method | Endpoint | Description | Auth / Input |
|---|---|---|---|
| POST | /api/v1/activate.php |
Initial activation of school license; binds hardware installation ID | license_key, installation_id, domain |
| POST | /api/v1/validate.php |
24-hour heartbeat check; returns refreshed signed license token | license_key, installation_id, domain |
| POST | /api/v1/refresh.php |
Instant on-demand revalidation trigger from school admin | license_key, installation_id, domain |
| POST | /api/v1/deactivate.php |
Unbinds hardware installation during server/hosting migration | license_key, installation_id |
| GET | /api/v1/status.php |
Public healthcheck and cryptographic authority operational status | None |