XuqmGroup 9fd358deef fix(sdk-license): HTTP 错误不回退缓存，防止已吊销设备认证通过 verify 返回 false 后 SDK 会尝试 register，服务端对已吊销设备返回 403。原 catch 块将 HttpException 与网络错误同等处理，导致 cachedStatus=="ok" 时依然返回 Success。修复：HttpException（4xx/5xx）直接写入 DENIED，只有真正的网络错误（IOException/超时）才允许离线缓存回退。 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-05-21 16:41:47 +08:00
..
src/main	fix(sdk-license): HTTP 错误不回退缓存，防止已吊销设备认证通过	2026-05-21 16:41:47 +08:00
build.gradle.kts	Add Android license SDK	2026-05-15 21:00:24 +08:00
consumer-rules.pro	Add Android license SDK	2026-05-15 21:00:24 +08:00
README.md	Use appKey in license SDK requests	2026-05-15 21:42:27 +08:00

README.md

Xuqm License SDK

Android SDK for device license registration and verification.

Features

Stable Device ID: Uses ANDROID_ID (stable per app signing key + device + user), with UUID fallback
Token Caching: Caches valid status for configurable window (default 10 min) to reduce network calls
Auto Recovery: Automatically re-registers when token is invalid or revoked
Offline Support: Returns cached OK status when network is unavailable
Encrypted License File: Reads assets/xuqm/license.xuqm; the file does not expose appKey or server URL as readable text
AppKey Change Detection: Automatically clears old data when decrypted appKey changes

Integration

dependencies {
    implementation("com.xuqm:sdk-license:0.1.0-SNAPSHOT")
}

Usage

License File

Download the encrypted License file from the tenant platform and place it at:

app/src/main/assets/xuqm/license.xuqm

The SDK also accepts a tenant-platform downloaded file such as app/src/main/assets/xuqm/MyApp.xuqmlicense.

No explicit initialization code is required.

Check License

LicenseSDK.checkLicense { isValid ->
    if (isValid) {
        // allow app usage
    } else {
        // block app usage or show warning
    }
}

Optional user metadata can be uploaded during the same check. All fields are optional.

LicenseSDK.checkLicense(
    userInfo = LicenseUserInfo(
        userId = "u_10001",
        name = "张三",
        email = "zhangsan@example.com",
        phone = "13800000000",
    ),
) { isValid ->
    // allow or block app usage
}

Get Status (no network)

val status = LicenseSDK.getStatus() // OK, DENIED, or UNKNOWN

Re-register (force)

lifecycleScope.launch {
    val result = LicenseSDK.reRegister()
}

Get Device ID

val deviceId = LicenseSDK.getDeviceId()

Configuration

Parameter	Default	Description
`appKey`	from encrypted file	AppKey from tenant platform
`deviceName`	`${MANUFACTURER} ${MODEL}`	Device display name
`baseUrl`	`https://auth.dev.xuqinmin.com/`	License server base URL

Data Storage

All data (device ID, token, status) is stored in EncryptedSharedPreferences with AES-256 encryption.