FAQ

chevron-rightWill My Account Be Blocked if I Go Over My API Usage?hashtag

You may have noticed that API usage appears on the dashboard of the Vendor platform:

API Usage Page

If the API usage goes over 100%, the progress bar will become red (and look really scary!). However, nothing bad will happen to your account. License checks still occur, nothing is throttled. However, you may want to proactively contact us to discuss upgrading your account.

chevron-rightWhere Do I Find My Multiple Accounts?hashtag

Platform users who have access to multiple accounts will have a drop down in the top left corner.

chevron-rightDo All Licenses Need to Be a Part of an Order?hashtag

Yes, all licenses need to be part of an order. However, you do not need to specify an order ID to issue a license. If you do not specify an orderID when issuing a new license, then LicenseSpring will randomly generate a new orderID.

Trial licenses typically have an orderID generated by Licensespring.

chevron-rightHow Do I Download All of the Licenses Created in LicenseSpring?hashtag

Navigate to the license summary page, and click on the "export" button in the right corner:

Downloading License

Select the Date Range for which you would like to export to process and click confirm:

Exporting License

A CSV file will automatically start downloading.

chevron-rightWhat Time Does LicenseSpring Use?hashtag

The Licensespring servers are in UTC.

chevron-rightWhat Constitutes a Device Transfer?hashtag

A License will increment the transfer count when it is deactivated from a device and then activated on another device.

circle-info

Even known devices will increment the transfer count. For example. Consider 2 devices, A and B. The following sequence will increment the transfer count twice:

  • License is activated on A.

  • License is deactivated on A

  • License is activated on B

  • License is deactivated on B

  • License is activated on A

chevron-rightWhat Are the LicenseSpring Public Facing Endpoints?hashtag
circle-exclamation

IPs:

  • 34.250.134.210 (as of June 19th, 2023 09:00 GMT)

  • 34.251.49.36 (as of June 19th, 2023 09:00 GMT)

  • 52.18.228.254

  • 54.78.102.217

IP
License API
Mgmt API & Platform
User portal
Integrations API
Webhooks API

34.250.134.210

*

-

*

-

*

34.251.49.36

-

*

-

*

-

52.18.228.254

*

-

*

-

*

54.78.102.217

-

*

-

*

-

2a05:d018:1735:a703::10

*

-

*

-

*

2a05:d018:1735:a702::10

-

*

-

*

-

chevron-rightCan LicenseSpring be integrated inside Apple Store?hashtag

E.g. if you want to use free app inside AppleStore and you want to implement licensing inside app. Integration LicenseSpring is against the policy of the app store unfortunately. They tend to wall off 3rd party licensing tools (https://developer.apple.com/app-store/review/guidelines/#businessarrow-up-right)

chevron-rightWhen the defined subscription interval has expired, the license stayed in status “Active” although the expiration date is in the past. Why is that? Shouldn't the status switch to “Expired”?hashtag

When a license expires it will still stay active. If you try to activate that license on a new device you will get error license_expired. When you perform license_check there is a field is_expired which will be True if license expired, otherwise False.

chevron-rightCan we implement a geographical location device tracking?hashtag

We recommend using a custom field, such as regionsAllowed, to define entitlements. These restrictions can then be enforced locally within your own codebase or devices. Every device location can be set using device variables.

While implementing georestrictions within the License API and providing a dedicated module in the SDK is on our roadmap, we do not have a clear ETA for this feature at the moment.

chevron-rightWhen is Anti-Clock tampering triggered? Does it stay triggered even when the customer sets their clock back to the correct time?hashtag

SDK

Within the SDK, any attempt to move the system clock to a past date will raise an exception. The SDK keeps track of the last time the license was used online, and if the local clock is earlier than that timestamp, the local check will fail.

License API

On the server side, the License API rejects requests with signatures older than 15 minutes, further preventing tampering.

chevron-rightHow exactly does cacheHardwareID work?hashtag

SDKs cache the hardware ID internally, but each time the local license check is used, the SDK recalculates the hardware ID and verifies it against the one embedded in the license file. This ensures that users cannot simply copy the license file to another machine.

chevron-rightHow does grace period work?hashtag

Grace period allows users to continue using the license offline for a predefined duration, providing resilience in case of temporary connectivity issues.

SDK grace period

Subscription licenses grace period

chevron-rightWhat is a required password policy for new license users and managers?hashtag

Password policy as implemented in LicenseSpring is:

  • Minimum 12 characters

  • 1 lowercase

  • 1 uppercase

  • 1 digit

  • 1 special character

  • it cannot be email or a recently used password in case of password reset

chevron-rightWhat is your brute force login protection policy?hashtag

To protect against unauthorized access, the system implements a login attempt limit:

  • Users are allowed up to 10 consecutive incorrect password attempts.

  • After 10 failed attempts, the user is temporarily blocked.

  • A user can be temporarily blocked up to three times, with each block increasing in duration:

    • 1st block: 15 minutes

    • 2nd block: 30 minutes

    • 3rd block: 45 minutes

This policy helps prevent brute-force attacks while still giving users a chance to recover from occasional login mistakes.

Last updated

Was this helpful?