Update XML endpoint — Joomla-compatible update server with DLID validation #621

New Issue

2026-06-12T07:58:38Z

jmiller commented

2026-06-12 07:58:38 +00:00

Phase 2.1 — Joomla Update Server

Parent: #616 | Depends on: #618, #619, #620 | Blocks: #628

routers/api/v1/licensing/updates.go:

Route

GET /api/v1/licensing/updates/{product}.xml?dlid=XXX&domain=YYY

Flow

Parse product code from URL path (e.g., restaurant.xml -> restaurant)
Parse DLID from query string
Validate DLID format (CRC32 check)
Look up license by DLID
Check license status (active) and expiry
Check entitlement for requested product code
Auto-activate domain if provided and under limit
If valid: return Joomla-compatible update XML with signed download URL
If invalid: return empty updates XML (Joomla handles gracefully)

Response format (Joomla update XML)

<?xml version="1.0" encoding="utf-8"?>
<updates>
  <update>
    <name>MokoSuite Restaurant</name>
    <version>01.01.00</version>
    <tag>stable</tag>
    <downloadurl type="full" format="zip">
      https://git.mokoconsulting.tech/api/v1/licensing/download/restaurant/01.01.00.zip?token=SIGNED_TOKEN
    </downloadurl>
    <targetplatform name="joomla" version="6.[0-9]" />
    <php_minimum>8.3</php_minimum>
  </update>
</updates>

Acceptance criteria

Returns valid Joomla update XML that Joomla's updater can parse
Invalid/expired/revoked DLID returns empty updates (no error, Joomla expects this)
Missing entitlement returns empty updates
Domain auto-activated on first valid check
Versions pulled from actual Gitea releases on the corresponding repo

## Phase 2.1 — Joomla Update Server Parent: #616 | Depends on: #618, #619, #620 | Blocks: #628 `routers/api/v1/licensing/updates.go`: ### Route `GET /api/v1/licensing/updates/{product}.xml?dlid=XXX&domain=YYY` ### Flow 1. Parse product code from URL path (e.g., `restaurant.xml` -> `restaurant`) 2. Parse DLID from query string 3. Validate DLID format (CRC32 check) 4. Look up license by DLID 5. Check license status (active) and expiry 6. Check entitlement for requested product code 7. Auto-activate domain if provided and under limit 8. If valid: return Joomla-compatible update XML with signed download URL 9. If invalid: return empty updates XML (Joomla handles gracefully) ### Response format (Joomla update XML) ```xml <?xml version="1.0" encoding="utf-8"?> <updates> <update> <name>MokoSuite Restaurant</name> <version>01.01.00</version> <tag>stable</tag> <downloadurl type="full" format="zip"> https://git.mokoconsulting.tech/api/v1/licensing/download/restaurant/01.01.00.zip?token=SIGNED_TOKEN </downloadurl> <targetplatform name="joomla" version="6.[0-9]" /> <php_minimum>8.3</php_minimum> </update> </updates> ``` ### Acceptance criteria - [ ] Returns valid Joomla update XML that Joomla's updater can parse - [ ] Invalid/expired/revoked DLID returns empty updates (no error, Joomla expects this) - [ ] Missing entitlement returns empty updates - [ ] Domain auto-activated on first valid check - [ ] Versions pulled from actual Gitea releases on the corresponding repo

jmiller commented

2026-06-12 07:58:45 +00:00

Branch created: feature/621-update-xml-endpoint-joomla-compatible-up

git fetch origin
git checkout feature/621-update-xml-endpoint-joomla-compatible-up

Branch created: [`feature/621-update-xml-endpoint-joomla-compatible-up`](https://code.mokoconsulting.tech/MokoConsulting/MokoGitea-APP/src/branch/feature/621-update-xml-endpoint-joomla-compatible-up) ```bash git fetch origin git checkout feature/621-update-xml-endpoint-joomla-compatible-up ```

jmiller referenced this issue

2026-06-12 07:58:57 +00:00

Signed download endpoint — ed25519 time-limited download URLs #622

jmiller referenced this issue

2026-06-12 08:00:48 +00:00

Shared MokoSuite system plugin — single DLID entry, auto-configure all update sites #628

jmiller referenced this issue

2026-06-12 08:05:11 +00:00

ROADMAP — Multi-repo licensing system implementation plan #616

Sign in to join this conversation.