Horvan Licence — signed licence check for every install
Horvan Licence is the licence check of Horvan Edu Coaching, the coaching centre app from Horvan Edu (a Horvans™ company). Every copy of the app checks a signed licence before it opens.
What it does
- Licence signed with ECDSA P-256; the public key is built into the app
- Checks the website address and the expiry date
- Once a session, asks our signed status list whether the licence was revoked
- If our licence server cannot be reached, the app keeps working on its signed licence and tells admins. After 14 days the notice becomes firmer. It locks only if the licence is revoked or has really expired.
Who it's for
Centres on their own servers, and the apps we publish.
How another app uses it
One script that runs first on every page. The app waits for it:
<html data-hz-base="/app/" data-hz-version="2.0.0">
<script src="/app/assets/js/hz.js"></script>
<script>
Hovarn.Licence.ready.then(licence => {
console.log(licence.licensee, licence.plan); // signature, domain and expiry already checked
});
</script>Where it stands In use
In use: it guards the first academy's preview and this site's demo. Honest limit: a check in the browser can be edited out by someone holding the files, so the real enforcement is on our servers, which refuse API calls without a valid licence.
It works together with Horvan Update. See how hosting and updates work.
Questions about Horvan Licence
What is Horvan Licence?
It is the licence check built into Horvan Edu Coaching, the coaching institute app from Horvan Edu (a Horvans™ company). It makes sure each copy of the app runs only on the website addresses and dates it is licensed for.
How is the licence protected?
The licence is signed with ECDSA P-256. The public key is built into the app, so a changed licence file fails the check.
When does the app lock?
Only when the licence is revoked by a signed message from our server, or when it has really expired. The lock screen says who to contact.
What if your licence server cannot be reached?
The app keeps working on its signed licence and tells admins. After 14 days the notice becomes firmer, but the app does not lock for this reason.
Can someone remove the check from the files?
Yes. A check in the browser can be edited out by someone who holds the files. That is why the real enforcement is on our servers, which refuse API calls without a valid licence.
Is it in use today?
Yes. It guards the first academy's preview and this site's demo.