AuthLX-Python-Example

A production-ready Python SDK and example application for AuthLX — the authentication and license management platform for desktop software.

This repository shows how to securely integrate AuthLX into any Python application, with a full suite of runtime security features built in.

🌟 Features

Authentication

Account Management

Subscription Helpers

Security

Rate Limiting & Lockouts

Ban Monitor

🚀 Quick Start

1. Requirements

pip install -r requirements.txt

Windows users also need pywin32 for advanced HWID generation.

2. Configure

Open main.py and set your application details:

APP_NAME    = "MyApp"
APP_ID      = "YOUR-APP-UUID-HERE"   # from your AuthLX Dashboard
APP_VERSION = "1.0"
APP_HASH    = others.get_checksum()  # auto-computed SHA-256

3. Run

python main.py

You will see an interactive console where you can test every SDK feature.

📁 Project Structure

AuthLX-Python-Example/
├── authlx.py          ← The SDK (import this in your own projects)
├── main.py            ← Interactive example demonstrating all features
├── requirements.txt   ← Python dependencies
└── other-examples/
    ├── merged_example.py  ← SDK + example in one standalone file
    ├── method1.py         ← Recommended: your code below the login gate
    ├── method2.py         ← Alternative: functions defined above main()
    └── README.md          ← Explanation of each integration pattern

🛡️ Security Notes

1. Anti-Debug (others.anti_debug()) — called automatically during api.__init__(). Exits immediately if a debugger is attached.

2. Anti-MITM (session.trust_env = False) — forces the requests library to ignore local proxy environments (Fiddler, Charles, Burp Suite, etc.).

3. Anti-Tamper (others.get_checksum()) — computes a real-time SHA-256 of sys.argv[0] and sends it to the backend on every login() call. Enable Hash Check in your AuthLX Dashboard to reject modified executables automatically.

4. HWID Locking — each login() call sends the machine's Hardware ID. If it doesn't match the one on file, the backend rejects the request with a clear error message directing the user to request an HWID reset.

5. Ban Monitor — call start_ban_monitor() after login to run a background daemon that periodically calls check(). If the session is revoked (e.g. by an admin ban), the process exits immediately via os._exit(1).

6. Host Locking — call set_allowed_hosts(["authlx.com"]) to restrict all HTTP requests made through the SDK to approved domains only.

📜 License

This SDK is provided open-source under the MIT License. Feel free to modify and adapt it for your own Python projects.