LibreAuth

API Getting Started

LibreAuth REST API — all client requests use POST form-urlencoded.

Endpoint

https://libreauth.nutexe.dev/api/1.3/

LibreAuth Client API — supported versions: v1.3 (all owners) and v1.4 (Enterprise, live). All requests use POST with wire-authenticated SDK clients. See API v1.4 for sequencing, compact responses, and stricter policy.

INFO
API v1.4 and Protocol v2 require Enterprise. Non-Enterprise owners keep /api/1.2/–/api/1.3/. See Protocol v2.
WARN
Only /api/1.3/ and /api/1.4/ are supported. Clients without wire token get E18 on init (or HTTP 404 on other types).

Common Parameters

typeRequest action — init, login, license, check, etc.
nameApplication name
ownerid10-character owner ID
sessionidFrom init response — required after init
hwidHardware ID string from client

Authentication Flow

init → login/license/register → check (heartbeat) → var/file/webhook → logout

File download: Public files need only init + file. Authenticated files require license or login first. See Error Codes → File flow.

INFO
Common errors: Error Codes — file download, sequence, hash, and session issues

Response Headers

Every signed response includes:

v1.3+: Wire-authenticated SDK clients required. Responses may be AES-encrypted when enckey is set. Ed25519 signatures on v1.3+.

INFO
Per-endpoint reference: Live API Reference · All Endpoints · Client SDKs (17 languages)

Response Encryption

Send enckey on init (35 chars). Responses encrypted with AES-256-CBC when enckey is set — recommended for production clients.

Ed25519 Public Key

Returned in init response as pubkey (compact p on 1.4). Embed in your client for signature verification — see Response Signing.

API Versions

VersionURLAccess
v1.4https://libreauth.nutexe.dev/api/1.4/Enterprise only · live · wire SDK · compact responses
v1.3https://libreauth.nutexe.dev/api/1.3/All plans · wire SDK required
INFO
Full 1.4 guide: API v1.4 documentation · Protocol v2: Enterprise wire · Plans: Billing Plans