pwfauth

Official Python client for PWF Auth — license keys, hardware-ID binding, encrypted sessions with a server-driven kill switch, free trials, remote texts/slides, and OTA update checks.

PWF Auth is 100% free — every feature, unlimited, forever.

pip install pwfauth

Python 3.9+. One dependency (cryptography), because Python has no AES in its standard library; HTTP uses urllib from the stdlib rather than pulling in requests.

Quick start

import os
import sys
from pwfauth import PwfClient

client = PwfClient(os.environ["PWFAUTH_SECRET"])

def on_session_ended(error_code, message):
    """Ban, pause, expiry, HWID reset, revoke, maintenance, or an unreachable
    server. Actually stop here — logging alone leaves the licence unenforceable."""
    print(f"Session ended ({error_code}): {message}", file=sys.stderr)
    sys.exit(1)

client.on_session_ended = on_session_ended

login = client.login("XXXXX-XXXXX-XXXXX-XXXXX")
if not login.success:
    print(login.message, file=sys.stderr)   # safe to show the user
    sys.exit(1)

client.start_heartbeat()   # keeps the session alive AND enforces the kill switch

start_heartbeat() is what turns a one-time check into a live session. Revoke the key in your dashboard and on_session_ended fires on the user's machine within seconds — it does not wait for the next launch.

Reading the licence

lic = login.license
if lic.is_lifetime:
    print("Lifetime licence")
else:
    print(f"Expires {lic.expires_at:%Y-%m-%d} — {lic.days_remaining} day(s) left")

expires_at is None for lifetime keys — the server sends expires_at: null, and treating that as a date is the most common integration bug against this API. The is_lifetime flag exists so you never have to.

Feature flags

if login.get_boolean("pro_export"):
    enable_export()

Handles the 1 / 0 / "true" forms the dashboard can store.

Checking a key without using a device seat

status = client.check_key(key)   # no session opened, no seat consumed

Hardware ID

from pwfauth import get_hardware_id
print(get_hardware_id())

Derived identically to the .NET and Node clients, so the same machine counts as one device under any SDK — switching languages does not burn a second seat against the licence's device limit.

Everything else

Error codes

from pwfauth import PwfErrorCodes, ends_session

if ends_session(res.error_code):
    sign_out()

ends_session() returns False for a code it does not recognise, on purpose: an unknown code is far more likely to be a new transient condition than a new way of being banned, and locking a paying user out on a guess is the worse failure.

Links

• Dashboard · API reference
• .NET client · Node client · VS Code extension

MIT