magdev/wc-licensed-product-client
1
Fork 0
Code Issues Pull Requests Activity
18 Commits 2 Branches 4 Tags
a11aa4260a3c1a244b30c7690a81ad08fb826b44
Commit Graph

5 Commits

Author SHA1 Message Date
magdev
8062e1be77 Align client and server signature implementation 
- Update server docs to use RFC 5869 hash_hkdf() for key derivation
- Add recursive key sorting to client ResponseSignature
- Ensures client and server produce matching signatures for nested objects

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-26 16:33:44 +01:00
magdev
9f513a819e Update server implementation documentation 
- Add complete API endpoints reference with request/response formats
- Add recursive key sorting for nested objects in signatures
- Add comprehensive error codes table with HTTP status codes
- Add rate limiting implementation with configurable limits
- Add complete WordPress plugin example with all handlers
- Add security sections: HTTPS, input sanitization, caching conflicts
- Update PHP version requirement to 8.3 for consistency
- Expand troubleshooting section with more scenarios

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-23 16:45:59 +01:00
magdev
c2cb1814de Add comprehensive client implementation documentation 
- Create docs/client-implementation.md with full integration guide
- Document all classes: clients, DTOs, exceptions, security classes
- Add integration examples for WordPress, Laravel, Symfony
- Include best practices and troubleshooting sections
- Update README with documentation links

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-23 16:33:10 +01:00
magdev
8aec2b21a9 Fix markdown table formatting in server documentation 
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-22 16:19:20 +01:00
magdev
e87a60926b Add security layer with response signature verification 
Security classes:
- ResponseSignature: HMAC-SHA256 signing and verification
- StringEncoder: XOR-based string obfuscation for source code
- IntegrityChecker: Source file hash verification
- SignatureException, IntegrityException for error handling

SecureLicenseClient:
- Verifies server response signatures
- Prevents response tampering and replay attacks
- Per-license derived signing keys
- Optional code integrity checking

Documentation:
- docs/server-implementation.md with complete WordPress/WooCommerce
  integration guide for signing responses

Tests:
- 34 new security tests (66 total, all passing)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-22 16:16:59 +01:00