Feature Requests
Under Review
Require business_id for license key activation
Hello, I see that activating a license key doesn't require providing the business_id.
It means that anyone can use any license key from any other app and activate it in my app.
The only workaround is to create your own backend server for validation and make an extra request to "Get License Key" and check the business_id separately.
This adds a lot of extra complexity and increases latency, because 2 separate HTTP requests will need to be made to dodopayments APIs.
Polar has this feature:
https://polar.sh/docs/api-reference/customer-portal/license-keys/activate
1 Comment
Sign in to comment
Relevant feature: client-side validation for license keys.
This issue also applies to validating license keys, not only to activating.
UPD: actually, just a single separate HTTP request won’t be enough: you can’t fetch the license key info by the key itself, you need to get the “ID”, and the closest workaround you can use is to fetch the “activation instance” first, and get the “license key ID” from there, so if you don’t provide the instance ID from the client in request, then you have no options at all…