keys rotated

Author: ildyria

config/verify.php

@@ -10,12 +10,12 @@
 
 return [
 	'validation' => [
-		ValidateSupporter::class => '882f8890242f77ee8dd8b84c6511c82e32858c12',
-		ValidatePro::class => '676b945ac8649a099ced12bfbab87b11c5c0daad',
+		ValidateSupporter::class => 'ef1a42701af6dc36e052556a0ee1c762394f9428',
+		ValidatePro::class => '482b48f1a026684b6c1754e45ca180ffc52483ff',
 		ValidateSignature::class => '5a8a855d4b59c44c298daa66801c79f2aba20492',
 		Verify::class => 'e5a8ebb4878c0fd3387ec0cb2f28d9caa463e5bb',
 		VerifySupporterStatus::class => '6358c45ed0414c1e2697e0881238659fa6221bed',
 		VerifyProStatus::class => '212e6ada794587ee8e2b81cf76e243d134a7e823',
-		VerifyServiceProvider::class => '927a8f3c811fc82cb8a0ac2667c06e7d292c3633',
+		VerifyServiceProvider::class => '923b63b15d25e69b95ed1d5ec1c82ba57f1a7d74',
 	],
 ];

generate-key.php

@@ -0,0 +1,35 @@
+<?php
+
+/**
+ * Generate a cryptographically secure key in the format:
+ * XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
+ *
+ * Each segment contains 5 uppercase alphanumeric characters (A-Z, 0-9)
+ */
+function generateSecureKey(): string
+{
+    $characters = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
+    $segments = [];
+
+    // Generate 5 segments
+    for ($i = 0; $i < 5; $i++) {
+        $segment = '';
+
+        // Generate 5 characters per segment
+        for ($j = 0; $j < 5; $j++) {
+            $randomIndex = random_int(0, strlen($characters) - 1);
+            $segment .= $characters[$randomIndex];
+        }
+
+        $segments[] = $segment;
+    }
+
+    return implode('-', $segments);
+}
+
+// Generate and display the key
+$key = generateSecureKey();
+$hash = password_hash($key, PASSWORD_BCRYPT);
+
+echo "Generated key: " . $key . PHP_EOL;
+echo "Bcrypt hash:   " . $hash . PHP_EOL;

src/Console/Commands/CheckKeyCommand.php

@@ -0,0 +1,61 @@
+<?php
+
+namespace LycheeVerify\Console\Commands;
+
+use Illuminate\Console\Command;
+use LycheeVerify\Contract\Status;
+use LycheeVerify\Validators\ValidatePro;
+use LycheeVerify\Validators\ValidateSupporter;
+
+use function Safe\json_encode;
+
+class CheckKeyCommand extends Command
+{
+    /**
+     * The name and signature of the console command.
+     *
+     * @var string
+     */
+    protected $signature = 'verify:check-key {key : The license key to check}';
+
+    /**
+     * The console command description.
+     *
+     * @var string
+     */
+    protected $description = 'Check the sponsorship level for a given license key';
+
+    /**
+     * Execute the console command.
+     */
+    public function handle(): int
+    {
+        $key = $this->argument('key');
+
+        $validateSupporter = new ValidateSupporter();
+        $validatePro = new ValidatePro();
+
+        // We use a dummy verifiable string for checking
+        $verifiable = json_encode(['url' => '', 'email' => '']);
+
+        // Check Pro edition first (highest tier)
+        if ($validatePro->validate($verifiable, $key)) {
+            $this->info('Key: ' . $key);
+            $this->info('Sponsorship Level: ' . Status::PRO_EDITION->value . ' (Pro Edition)');
+            return Command::SUCCESS;
+        }
+
+        // Check Supporter edition
+        if ($validateSupporter->validate($verifiable, $key)) {
+            $this->info('Key: ' . $key);
+            $this->info('Sponsorship Level: ' . Status::SUPPORTER_EDITION->value . ' (Supporter Edition)');
+            return Command::SUCCESS;
+        }
+
+        // Key doesn't match any known tier
+        $this->warn('Key: ' . $key);
+        $this->warn('Sponsorship Level: ' . Status::FREE_EDITION->value . ' (No valid sponsorship found)');
+
+        return Command::FAILURE;
+    }
+}

src/Validators/ValidatePro.php

@@ -15,7 +15,7 @@ class ValidatePro implements ValidatorInterface
 
 	public function __construct(#[\SensitiveParameter] ?string $hash = null)
 	{
-		$this->hash = $hash ?? '$2y$10$Bo9bqC34tQr.hEJ1qZZNBO.dkJRoEiLeZpXxlsYaSlaKi/dRyCyea';
+		$this->hash = $hash ?? '$2y$12$HCan1i4raFBRltqPSy2imeDAIf7UQxSQTJpA3Jv0cJ/fplNc4mEta';
 	}
 
 	/**

src/Validators/ValidateSupporter.php

@@ -15,7 +15,7 @@ class ValidateSupporter implements ValidatorInterface
 
 	public function __construct(#[\SensitiveParameter] ?string $hash = null)
 	{
-		$this->hash = $hash ?? '$2y$10$Bo9bqC34tQr.hEJ1qZZNBO.dkJRoEiLeZpXxlsYaSlaKi/dRyCyea';
+		$this->hash = $hash ?? '$2y$12$x58lfmOIxyKh3kzZyWJibuDPnDXO7er6xmDqoUZ3PNrFJHF9DaHpC';
 	}
 
 	/**

src/VerifyServiceProvider.php

@@ -3,6 +3,7 @@
 namespace LycheeVerify;
 
 use Illuminate\Support\ServiceProvider;
+use LycheeVerify\Console\Commands\CheckKeyCommand;
 
 class VerifyServiceProvider extends ServiceProvider
 {
@@ -17,7 +18,7 @@ class VerifyServiceProvider extends ServiceProvider
 	 */
 	public function register()
 	{
-		$this->mergeConfigFrom(static::CONFIG, 'verify');
+		$this->mergeConfigFrom(self::CONFIG, 'verify');
 
 		$this->app->bind('verify', function () {
 			return new \LycheeVerify\Verify(); // Replace with your actual instantiation logic.
@@ -26,5 +27,10 @@ public function register()
 
 	public function boot(): void
 	{
+		if ($this->app->runningInConsole()) {
+			$this->commands([
+				CheckKeyCommand::class,
+			]);
+		}
 	}
 }