magdev/wc-licensed-product-client
1
Fork 0
Code Issues Pull Requests Activity
22 Commits 2 Branches 4 Tags
56abe8a97c72419c07a6daf263ba6f4a9b5fe4b1
Commit Graph

5 Commits

Author SHA1 Message Date
magdev
56abe8a97c Add update-check endpoint documentation (v0.2.2) 
- Add /update-check endpoint documentation to server-implementation.md
- Add product_not_found error code to error codes table
- Add handleUpdateCheck() handler example in WordPress plugin
- Add findProduct() method stub for product lookups
- Verified client implementation aligns with server documentation

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-28 11:56:47 +01:00
magdev
8062e1be77 Align client and server signature implementation 
- Update server docs to use RFC 5869 hash_hkdf() for key derivation
- Add recursive key sorting to client ResponseSignature
- Ensures client and server produce matching signatures for nested objects

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-26 16:33:44 +01:00
magdev
9f513a819e Update server implementation documentation 
- Add complete API endpoints reference with request/response formats
- Add recursive key sorting for nested objects in signatures
- Add comprehensive error codes table with HTTP status codes
- Add rate limiting implementation with configurable limits
- Add complete WordPress plugin example with all handlers
- Add security sections: HTTPS, input sanitization, caching conflicts
- Update PHP version requirement to 8.3 for consistency
- Expand troubleshooting section with more scenarios

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-23 16:45:59 +01:00
magdev
8aec2b21a9 Fix markdown table formatting in server documentation 
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-22 16:19:20 +01:00
magdev
e87a60926b Add security layer with response signature verification 
Security classes:
- ResponseSignature: HMAC-SHA256 signing and verification
- StringEncoder: XOR-based string obfuscation for source code
- IntegrityChecker: Source file hash verification
- SignatureException, IntegrityException for error handling

SecureLicenseClient:
- Verifies server response signatures
- Prevents response tampering and replay attacks
- Per-license derived signing keys
- Optional code integrity checking

Documentation:
- docs/server-implementation.md with complete WordPress/WooCommerce
  integration guide for signing responses

Tests:
- 34 new security tests (66 total, all passing)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-22 16:16:59 +01:00