License validation API — validate DLID + product + domain #623

New Issue

2026-06-12T07:59:17Z

jmiller commented

2026-06-12 07:59:17 +00:00

Phase 2.3 — Validation API

Parent: #616 | Depends on: #618, #619, #620

routers/api/v1/licensing/validate.go:

Routes

GET /api/v1/licensing/validate?dlid=XXX&product=YYY&domain=ZZZ — public validation check
GET /api/v1/licensing/{dlid}/status — full license status (authenticated)

Validate response

{
  "valid": true,
  "tier": "pos",
  "tier_name": "MokoSuite POS",
  "products": ["base", "crm", "erp", "pos"],
  "domains_used": 2,
  "domains_max": 5,
  "expires_at": "2027-06-11T00:00:00Z",
  "status": "active"
}

Invalid response:

{
  "valid": false,
  "reason": "expired" // or "revoked", "invalid_dlid", "no_entitlement", "domain_limit"
}

Use cases

Joomla system plugin checks license status on admin login (show warning if expiring)
MokoSuite Shop validates DLID during purchase flow
External integrations verify license programmatically

Acceptance criteria

Public endpoint (no auth needed) for basic valid/invalid check
Authenticated endpoint returns full license detail
Rate limited to prevent brute-force DLID enumeration
Returns specific reason codes for invalid states

## Phase 2.3 — Validation API Parent: #616 | Depends on: #618, #619, #620 `routers/api/v1/licensing/validate.go`: ### Routes - `GET /api/v1/licensing/validate?dlid=XXX&product=YYY&domain=ZZZ` — public validation check - `GET /api/v1/licensing/{dlid}/status` — full license status (authenticated) ### Validate response ```json { "valid": true, "tier": "pos", "tier_name": "MokoSuite POS", "products": ["base", "crm", "erp", "pos"], "domains_used": 2, "domains_max": 5, "expires_at": "2027-06-11T00:00:00Z", "status": "active" } ``` Invalid response: ```json { "valid": false, "reason": "expired" // or "revoked", "invalid_dlid", "no_entitlement", "domain_limit" } ``` ### Use cases - Joomla system plugin checks license status on admin login (show warning if expiring) - MokoSuite Shop validates DLID during purchase flow - External integrations verify license programmatically ### Acceptance criteria - [ ] Public endpoint (no auth needed) for basic valid/invalid check - [ ] Authenticated endpoint returns full license detail - [ ] Rate limited to prevent brute-force DLID enumeration - [ ] Returns specific reason codes for invalid states

jmiller commented

2026-06-12 07:59:20 +00:00

Branch created: feature/623-license-validation-api-validate-dlid-pro

git fetch origin
git checkout feature/623-license-validation-api-validate-dlid-pro

Branch created: [`feature/623-license-validation-api-validate-dlid-pro`](https://code.mokoconsulting.tech/MokoConsulting/MokoGitea-APP/src/branch/feature/623-license-validation-api-validate-dlid-pro) ```bash git fetch origin git checkout feature/623-license-validation-api-validate-dlid-pro ```

jmiller referenced this issue

2026-06-12 08:01:24 +00:00

MokoSuite CRM integration — license purchase, DLID delivery, customer portal #630

jmiller referenced this issue

2026-06-12 08:05:11 +00:00

ROADMAP — Multi-repo licensing system implementation plan #616

Sign in to join this conversation.