Login logs.

[electr1chka]

My client is having trouble logging in. He is worried that having an api key, a module number and a product, anyone will be able to download a licensed product. Therefore, a check on the host is necessary. Or logging user requests.

[r-brown]

Hello @electr1chka

You may need to consider following activities to improve security:

• enabling response signing as it is described here https://netlicensing.io/wiki/signing-the-response
• specify concrete licensee while creating API key - this will restrict usage of the given API Key to the one concrete licensee only
• use minimal API key role ROLE_APIKEY_LICENSEE to restrict API usage; see more at https://netlicensing.io/wiki/security#api-key-identification

[electr1chka]

What about requests logs? ip, url, timestamp?

[r-brown]

What about requests logs? ip, url, timestamp?

Request logs are not exposed via API and therefore cannot be accessed via unauthorized channel.