astraguard 1.1.0

Official AstraGuard SDK — license validation, HWID binding, and offline cache for Python server applications

astraguard

Official AstraGuard SDK for Python — license validation, HWID binding, and AES-256-GCM offline cache for server-side applications.

Server-Side Only This SDK is for Python server applications (Flask, FastAPI, Django, etc.). Do NOT embed it in client-side software — Python offers no meaningful anti-debug or anti-VM protection. For desktop protection use the C++ header or Rust SDK.

Installation

pip install astraguard

Async support (FastAPI, asyncio):

pip install "astraguard[async]"

Sync (Flask / Django)

from astraguard import AstraGuardClient

client = AstraGuardClient(
    api_url="https://api.astraguard.io",
    product_id="your-product-id",
)

result = client.validate("XXXX-XXXX-XXXX-XXXX")
if result.valid:
    print("License valid!")

Async (FastAPI)

from astraguard import AsyncAstraGuardClient

client = AsyncAstraGuardClient(
    api_url="https://api.astraguard.io",
    product_id="your-product-id",
)

result = await client.validate("XXXX-XXXX-XXXX-XXXX")

Features

• validate() / activate() with fully typed responses
• HMAC-SHA256 response verification (fail-closed)
• AES-256-GCM encrypted offline cache (configurable grace period)
• Background heartbeat thread
• Cross-platform HWID derivation (Windows registry, /etc/machine-id, IOPlatformUUID)
• Update check via /check-update
• Zero mandatory dependencies beyond cryptography
• Full type annotations + py.typed marker

Error Handling

from astraguard import NetworkError, ServerError, SignatureMismatch

try:
    result = client.validate(license_key)
except NetworkError:
    pass  # unreachable + no cache
except ServerError as e:
    print(f"HTTP {e.status}")
except SignatureMismatch:
    pass  # tampered response

Heartbeat

import sys

client.start_heartbeat(
    license_key="XXXX-XXXX-XXXX-XXXX",
    interval=300,
    on_lapse=lambda: sys.exit(1),
)

License

MIT