Best technique to securing license key

[Herry]

Hi,

What is the recommended ways to securing the licenses key. Hardcoded in the apps someone could just decompile/re it to get the key. Even using beckend server to retrive the key, if the apps already decomple/re the keys could be retrive via packet in network or event in the modify apps.

What is the standard Syncfusion recommended ways and what is the standard developer do to protect this ?

Any one could help

Than you

Herry

[Kannan]

Hi Herry, 

 

Thanks for contacting Syncfusion support. 

  

We requesting to registering the encrypted license key as string in application. We considered this in our improvement to protect the license key. We have logged this as future request and it will implement in our any upcoming release.  

  

Regards, 

Kannan 

[Herry]

ok thank your for your advice

[Preethi Nesakkan Gnanadurai]

Hi Herry, 

  

Most welcome. 

  

Regards, 

Preethi 

[Abhinay Maurya]

Any updates ?

[Jeyaseelan M]

Hi Abhinay,

We currently don’t have an option to secure the license keys which is registered in the project. We have implemented this licensing (key) validation system just to avoid our customers using our products inadvertently.

So, you can use this license key directly in your project.

Regards,

Jeyaseelan M

[Abhinay Maurya]

Hi,

I have one suggestion to implement the registration in such a way that we don't require it to pass the key in our code

We can use in this way like Kendo UI does: 

https://www.telerik.com/blogs/introducing-license-keys-kendo-ui-for-angular

It helps us to avoid adding it into our code base when deploying into our server :  https://www.telerik.com/kendo-angular-ui-develop/components/my-license/#toc-should-i-add-the-license-key-to-source-control

[Gokulraj Varatharajan]

Hi Abhinay,

Thanks for your update,

Already we have planned to implement the License registration secure process feature at our end, and we will include this with any of our upcoming main releases.

Please get back to us if you have any concerns.

Regards,

Gokul

[Chandana Kithalagama]

Hi Gokul,

Looks like this feature is implements now which is great. We have tried the said mechanism as described by your doco. But the "npx syncfusion-license activate​" command throws an error saying the npm package is missing in rpm repo.

​
% npx syncfusion-license activate
​npm ERR! code E404npm 
ERR! 404 Not Found - GET https://registry.npmjs.org/syncfusion-license - Not found
​npm ERR! 404 
npm ERR! 404  'syncfusion-license@*' is not in this registry.
​npm ERR! 404 
​npm ERR! 404 Note that you can also install from a
​npm ERR! 404 tarball, folder, http url, or git url.

Is there any reason for this?

[Chandana Kithalagama]

Removing the node_modules folder and running `npx` command fixed the issue.

[Mohamed Imran Thamin Ansari]

Hi Chandana, 

 

We are pleased to learn that we have resolved your issue. If you need any further assistance or clarification, Reach out to us.

 

Regards, 

Mohamed