Woocommerce linked licensing system for your plugins

Matt_SF

This post is deleted!

Matt_SF

Hey, it's me again ! I have a question regarding security :

I'm into the process of "converting" my Kontakt instruments into VSTs and I'm using JWT Auth + the License manager plugin, but I just set up the license system so the customers who already purchased my Kontakt instruments don't have a serial number yet.

In order to offer the smoothest user experience, my first tought of managing this was to implement an 'Auth + Register' system in the VST plugin which does this (roughly) :

User enter Username & Password then use JWT to authenticate the user then :

if (User owns the product)
{
    if (User already have a serial)
    {
        ServerCall.use License Manager endpoint to check the serial and authorize the plugin;
    }
    else if (User dont have a serial in his account)
    {
        plugin.function(generateSerial);

        ServerCall.use License Manager endpoint to create a serial number into User account and authorize the plugin;
    }
}
else
{
    Dont unlock the plugin
}

But I'm concerned by automatically creating a serial with the License manager endpoint. Wouldn't it be a major security breach to let a plugin use this endpoint ? Technically it writes something in my DB....

d.healey

@matt_sf If it's an authorised request via jwt it shouldn't be anymore of a risk than doing the same thing through your website

orange

@matt_sf said in Woocommerce linked licensing system for your plugins:

But I'm concerned by automatically creating a serial with the License manager endpoint. Wouldn't it be a major security breach to let a plugin use this endpoint? Technically it writes something in my DB....

I think you shouldn't use creating serial number endpoint, that could be a security hole like you said.

What you can do is: upload/create "unregistered" serials into your Woocommerce License Manager admin area. While uploading the serials, you need to mark them as "unregistered".

Then the user needs to enter the exact serial number to register it. This way would be more secure because if the entered serial is not in your "unregistered serials list", then the license activation can't be done. You can also use this system for the resellers too. You can give unregistered serials to the resellers to sell them, then the users will need to register the code into their account.

But giving a right to create a serial number is a different story and this might be a security issue.

Matt_SF

@orange @d-healey thanks for your answers. My problem was to at least assign thoses licenses - if not send them - to existing customers (there are about 300-400 of them so doing it manually was not an option ).

But I just thought that it shouldn't be a problem to upload a bunch of unregistered licences and, instead of creating one via the plugin, just get one and activate it (I should have thought of that).

Thank you !

Matt_SF

@orange too bad, it seems there's no way to 'GET' an existing unregistered license which then can be activated on the fly with the License Manager's API. In order for this to work, the user must have received his license beforehand.
I'll have to find another way... Thanks anyway !

clumsybear

Nice work @orange & @ustk!
Do you have any idea if it is possible to implement this to plugins made with juce, without hise? is there any juce api for this instead the hise server api?

d.healey

@clumsybear You'd have to use the JUCE network class probably: https://docs.juce.com/master/group__juce__core-network.html

clumsybear

@orange said in Woocommerce linked licensing system for your plugins:

For page design, definitely go with Gutenberg (with Kadence Blocks). I think the page builders (like Divi, Elementor...etc.) will die soon, because Gutenberg (which is designed by Wordpress) is much more faster, getting better day by day, and it is the future of Wordpress.

@orange so after a few years using Gutenberg, do you still think it's the future of page builders? I read a lot of reviews reporting problems with it and people switching back to Elementor. What's your experience?

d.healey

@clumsybear I use Gutenberg but not the woo blocks because they're quite limited

clumsybear

nice, what are your thoughts on it? why did you decide against other page builders? @d-healey

d.healey

@clumsybear I try to follow the KISS principle. My website is totally functional without needing an additional dependency of a page builder, and it looks decent and is simple for the user to navigate.

orange

@clumsybear said in Woocommerce linked licensing system for your plugins:

I read a lot of reviews reporting problems with it and people switching back to Elementor. What's your experience?

What kind of issues?

Gutenberg works great here. Page loading speed, Google ranking is pretty high also.

There are lots of features are being added continuously to Gutenberg. People preferred other page builders for design speed before. But now, Gutenberg is easier/faster to use now. I think there are no need for another third party page builders anymore (at least for me).

Also Wordpress & Woocommerce integrate to Gutenberg much better than other 3rd party builders. But this integration quality also depends on the theme you use. So choose a good and fast theme first.

Matt_SF

@clumsybear I think I never could understand the workflow in Gutenberg. I come from elementor but got tired of the bloat and heaviness (even if it's pretty efficient in terms of design possibilities IMO).
I'm trying the oxygen builder these days and it seems pretty nice...

clumsybear

@orange as far as I understand Gutenberg development is breaking compatibility with almost every other update, so that you have to rework your pages made with the block builder. Also there seem to be lots of missing features compared to other builders.

I'm asking because I have no experience with Gutenberg, only with Elementor and I would like to switch from Elementor to a simpler and less bloated solution.

So you're saying the Kadence Theme with Gutenberg and WP 6.2 is a solid solution and you did not encounter any problems?

Thanks for replying btw @orange

@Matt_SF thanks for the suggestion, I will look into oxygen builder, never heard of it. Although, my ideal solution would be without 3rd party builders, if I can manage it :)

I totally understand getting tired of the bloat and heaviness, I have the same experience right now

Dan Korneff

@Matt_SF using oxygen here as well.

orange

@clumsybear said in Woocommerce linked licensing system for your plugins:

So you're saying the Kadence Theme with Gutenberg and WP 6.2 is a solid solution and you did not encounter any problems?

Yes. Kadence team is constantly making updates. I think one of the most important things here is to get update support and a service that provides this continuously. I tested lots of page builders including Elementor. Page load speed depends on many parameters, but acording to my experience, Gutenberg performance is ahead in terms of page bıilders.

fastermaster

Hi guys, I've found this new really good WP plugin, well documented, the agency is cooperative as well.
I'm looking to create a library to be able connect to the API and activate my plugin using a login.

Does anyone know someone that will be interested in this job/integration?

Thanks

d.healey

@fastermaster What is the WP plugin?

Lindon

@fastermaster ..yeah and point us at the API please...

Woocommerce linked licensing system for your plugins

30

1.9k

10.7k

93.0k