fastapi-license

Enterprise hardware-bound license system for FastAPI applications.
Distribusi binary terobfuskasi via PyArmor v8+ BCC mode, dengan CLI berbasis Click + Rich dan integrasi FastAPI Lifespan & Middleware.

Instalasi

pip install fastapi-license

Alur Kerja

1. Client: Ambil Hardware Fingerprint (Server Klien)

fastapi-license probe --output fingerprint.json

2. Developer: Generate Lisensi

fastapi-license gen \
  --fingerprint fingerprint.json \
  --expiry 2027-12-31 \
  --features "analytics,pdf_export,billing" \
  --private-key private.pem \
  --output license.lic

3. Developer: Build & Obfuskasi Kode FastAPI

fastapi-license build --src ./my_app --dist ./dist_protected --bcc

4. Admin: Inspeksi Lisensi

fastapi-license inspect --license license.lic --public-key public.pem

Integrasi FastAPI

from contextlib import asynccontextmanager
from fastapi import FastAPI, Depends
from fastapi_license import LicenseManager, LicenseGuardMiddleware, require_feature

license_manager = LicenseManager(
    license_path="license.lic",
    public_key_path="public.pem"
)

@asynccontextmanager
async def lifespan(app: FastAPI):
    license_manager.verify_on_startup()
    yield

app = FastAPI(title="Protected API", lifespan=lifespan)
app.add_middleware(LicenseGuardMiddleware, manager=license_manager)

@app.get("/api/analytics", dependencies=[Depends(require_feature("analytics"))])
async def analytics():
    return {"data": "Analytics stream"}

Generate Keypair

from fastapi_license.core.crypto import CryptoEngine

engine = CryptoEngine()
private_pem, public_pem = engine.generate_keypair(algorithm="ed25519")

with open("private.pem", "wb") as f:
    f.write(private_pem)
with open("public.pem", "wb") as f:
    f.write(public_pem)

Security Architecture

• Hardware Binding: CPU ID + Motherboard UUID + Root Disk Serial + Primary MAC → SHA-256
• Cryptography: Ed25519 (default) / RSA-4096 asymmetric signature
• Obfuscation: PyArmor v8+ BCC Mode → native C binary (.so / .pyd)
• Fail-Closed: Semua error lisensi menyebabkan sys.exit(1) sebelum server bind port
• Clock Anti-Tamper: Monotonic clock + heartbeat timestamp comparison

Exception Hierarchy