API documentation

<?php

function verifyLicense(string $key, string $domain): array
{
    $ch = curl_init('https://mitrait.in/api/v1/license/verify');

    curl_setopt_array($ch, [
        CURLOPT_POST           => true,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_TIMEOUT        => 10,
        CURLOPT_HTTPHEADER     => ['Content-Type: application/json', 'Accept: application/json'],
        CURLOPT_POSTFIELDS     => json_encode([
            'license_key' => $key,
            'domain'      => $domain,
        ]),
    ]);

    $body = curl_exec($ch);
    $error = curl_error($ch);
    curl_close($ch);

    // Fail open on a network problem: an outage on our side must not
    // take the customer's installation offline.
    if ($error || $body === false) {
        return ['success' => true, 'code' => 'offline_grace', 'message' => $error];
    }

    return json_decode($body, true) ?? ['success' => false, 'code' => 'invalid'];
}

$result = verifyLicense(getenv('LICENSE_KEY'), $_SERVER['HTTP_HOST']);

if (! $result['success']) {
    exit('Licence problem: ' . $result['message']);
}

const BASE = 'https://mitrait.in/api/v1';

export async function verifyLicense(key, domain) {
  const controller = new AbortController();
  const timeout = setTimeout(() => controller.abort(), 10_000);

  try {
    const response = await fetch(`${BASE}/license/verify`, {
      method: 'POST',
      headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
      body: JSON.stringify({ license_key: key, domain }),
      signal: controller.signal,
    });

    return await response.json();
  } catch (error) {
    // Fail open — never hard-block on a transient network fault.
    return { success: true, code: 'offline_grace', message: error.message };
  } finally {
    clearTimeout(timeout);
  }
}

# Verify
curl -X POST https://mitrait.in/api/v1/license/verify \
  -H "Content-Type: application/json" \
  -d '{"license_key":"SMKT-8F72-29KD-4B1P","domain":"customer-site.com"}'

# Activate
curl -X POST https://mitrait.in/api/v1/license/activate \
  -H "Content-Type: application/json" \
  -d '{"license_key":"SMKT-8F72-29KD-4B1P","domain":"customer-site.com"}'

# Authenticated call
curl https://mitrait.in/api/v1/me/licenses \
  -H "Authorization: Bearer mk_xxxxxxxx_yyyyyyyyyyyy" \
  -H "Accept: application/json"