Returns overall service health only.

{
  "ok": true,
  "service": "license_auth",
  "version": "0.1.0",
  "time_utc": 1700000000,
  "uptime_seconds": 300
}

Alias for the same overall health response.

Returns a challenge for encrypted login payload handshakes.

Query: ?username=admin
Response:
{
  "nonce": "f2d2f...",
  "key_id": "rsa-key-01",
  "expires_at": 1700000000
}

Supports encrypted login payloads and policy-based fallback.

{
  "username": "admin",
  "encrypted_password": "<base64>",
  "login_nonce": "f2d2f...",
  "key_id": "rsa-key-01",
  "challenge_ts": 1700000000
}

Issues a license with plan, owner, activation and device constraints.

{
  "plan": "pro",
  "level": "user",
  "owner": "customer_01",
  "days_valid": 30,
  "max_activations": 5,
  "max_devices": 3
}

Runs renew/suspend/revoke/delete/hwid-reset actions over filtered key sets.

{
  "action": "renew",
  "days": 30,
  "status": "active",
  "plan": "pro"
}

Permanently deletes a key (guarded for safety and audit).

Applies bundle preset and cycle to enforce capability boundaries.

{
  "preset": "gold",
  "cycle": "monthly",
  "admin_note": "manual approved payment"
}

Records warning; threshold policy may auto-enforce bans.

{
  "note": "license sharing violation"
}

Sets global security controls for lockout, replay, reputation, and encryption.

{
  "enforce_login_payload_encryption": true,
  "max_login_attempts": 6,
  "replay_window_secs": 120,
  "ip_reputation_mode": "standard"
}

Executes emergency platform controls for super admins.

{
  "action": "force_reauth_non_admin"
}

Publishes current frontend-visible security toggles and enabled feature flags.

{
  "security": { "enforce_login_payload_encryption": true, "network_protection_mode": "strict" },
  "features": { "guest_login_enabled": false, "demo_mode_enabled": true },
  "enabled_feature_flags": ["priority_tickets", "advanced_export"]
}

Returns event stream records (risk, actor, IP, summary, timestamp).

Returns immutable operator audit records for compliance workflows.