# API Guide

## Authentication

### Register

`POST /api/v1/auth/register`

### Login

`POST /api/v1/auth/login`

Returns a bearer token created by the application token store.

## Signed license endpoints

These endpoints require:

- `X-License-Timestamp`
- `X-License-Signature`

Signature format:

`hash_hmac('sha256', METHOD|PATH|TIMESTAMP|JSON_PAYLOAD, LICENSE_API_SHARED_SECRET)`

## License activation

`POST /api/v1/licenses/activate`

Payload fields:

- `email`
- `password`
- `license_key`
- `domain`
- `installation_path`
- `server_fingerprint`
- `ip_address`

## License verification

`POST /api/v1/licenses/verify`

## License deactivation

`POST /api/v1/licenses/deactivate`

## Update checks

`POST /api/v1/updates/check`