Dual-Secret Authentication System

LockHorizon implements an enhanced security model with separate authentication secrets for each API, providing better isolation and security for your store operations.

Authentication Secrets

Finding Your Secrets

1. Log into your LockHorizon dashboard
2. Navigate to Store Settings
3. Copy your 48-character auth_secret for License API
4. Copy your 48-character store_secret for Store API
5. Keep both secrets secure and never share them publicly

Request Format

Each API uses different authentication methods and secrets:

License API (v0) - Encrypted Authentication

License API uses encrypted POST requests with your auth_secret. All data is secured using enterprise-grade encryption.

POST https://lockhorizon.com/api/v0/
Content-Type: application/x-www-form-urlencoded

auth_secret=your_48_char_auth_secret
[encrypted payload parameters]

Store API (v1) - Bearer Token Authentication

GET https://lockhorizon.com/api/v1/products
Authorization: Bearer your_48_char_store_secret
Content-Type: application/json

Official SDKs

LockHorizon provides officially maintained SDKs to simplify integration with the License API. These SDKs handle all the complexity of encryption, session management, and secure communications.

SDK Features

• Automatic Encryption: All data is automatically encrypted and decrypted
• Session Management: Handles login, session validation, and logout automatically
• HWID Detection: Platform-specific hardware ID generation
• Error Handling: Comprehensive error handling with detailed messages
• Thread Safety: Safe for use in multi-threaded applications
• Retry Logic: Automatic retry on network failures
• Rate Limiting: Built-in rate limiting compliance

Community Contributions

We welcome and appreciate community contributions for additional languages and frameworks. If you've created an SDK or wrapper for LockHorizon APIs, we'd love to hear about it and include it in our documentation as an unofficial SDK.

Error Codes & Troubleshooting

Common error responses and troubleshooting guide for SDK integration.

HTTP Status Codes

Common Error Messages

Overview

The License API provides comprehensive license key management for protecting your software applications. It handles license verification, user authentication, HWID binding, session management, variable storage, and audit logging. All communications use enterprise-grade encryption and require your auth_secret for authentication.

Base URL

https://lockhorizon.com/api/v0/

Available Operations

Overview

License Variables provide a secure way to store sensitive information on LockHorizon's servers instead of hardcoding values in your application. These variables are automatically returned during successful login/verification and can store configuration data, API keys, feature flags, or any other sensitive information your application needs.

Variable Types

How Variables Work

1. Setup: Configure variables in your LockHorizon dashboard under Store Settings
2. Automatic Delivery: Variables are included in every successful login response
3. Client Access: Your application receives variables and can use them immediately
4. Security: Sensitive data stays on our servers, not in your compiled application

Example Variable Response

{
  "variables": {
    "api_endpoint": "https://api.example.com/v1",
    "premium_features": true,
    "max_users": "100",
    "secret_key": "sk_live_abc123def456",
    "config_file": "Binary data"
  }
}

Common Use Cases

• API Keys: Store third-party API keys securely
• Feature Flags: Enable/disable features remotely
• Configuration: Server URLs, timeouts, limits
• Licensing Tiers: Different features for different license levels
• Updates: Minimum version requirements, update URLs
• Branding: Custom themes, logos, or styling data

Overview

Hardware ID (HWID) management allows you to bind license keys to specific devices, preventing unauthorized sharing while providing flexibility for legitimate use cases.

Overview

The Store API provides access to your store's data including products, orders, customers, and analytics. This API uses your store_secret for authentication and is currently in development with basic functionality available.

Base URL

https://lockhorizon.com/api/v1/

Authentication

All Store API requests require your store_secret in the Authorization header:

Authorization: Bearer your_48_char_store_secret

Planned Features

• Retrieve order history
• Get order details by ID
• Update order status
• Process refunds
• Track order analytics